diff options
| author | Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi> | 2017-10-18 16:25:11 +0300 |
|---|---|---|
| committer | Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi> | 2017-10-18 16:25:11 +0300 |
| commit | b5f332c61b2912b4f048d5d2a38557dedfe7b5fb (patch) | |
| tree | 6b5be248af039536f78c1a18ed6398baed79079d /test | |
| parent | c12fcf17b7acf4a96baab153f5e0951ad58b1d8d (diff) | |
| download | awall-b5f332c61b2912b4f048d5d2a38557dedfe7b5fb.tar.bz2 awall-b5f332c61b2912b4f048d5d2a38557dedfe7b5fb.tar.xz | |
test: split to 4 cases
Diffstat (limited to 'test')
20 files changed, 15206 insertions, 12116 deletions
diff --git a/test/mandatory/address.lua b/test/optional/address.lua index 8063154..8063154 100644 --- a/test/mandatory/address.lua +++ b/test/optional/address.lua diff --git a/test/mandatory/filter-limit.lua b/test/optional/filter-limit.lua index a0bfc0b..a0bfc0b 100644 --- a/test/mandatory/filter-limit.lua +++ b/test/optional/filter-limit.lua diff --git a/test/mandatory/filter.json b/test/optional/filter.json index 3918b9b..3918b9b 100644 --- a/test/mandatory/filter.json +++ b/test/optional/filter.json diff --git a/test/mandatory/no-track.json b/test/optional/no-track.json index 4c0cd2e..4c0cd2e 100644 --- a/test/mandatory/no-track.json +++ b/test/optional/no-track.json diff --git a/test/output/address/dump b/test/output/address/dump new file mode 100644 index 0000000..176956c --- /dev/null +++ b/test/output/address/dump @@ -0,0 +1,4528 @@ +Dnat 1 {"in":["_fw","A"]} +(zone) + inet/nat/OUTPUT -j REDIRECT + inet/nat/PREROUTING -i eth0 -j REDIRECT + +Dnat 2 {"in":"B"} +(zone) + inet/nat/PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT + + +Filter 1 {} +(address) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 2 {"action":"pass"} +(address) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 3 {"log":true} +(address) + inet/filter/FORWARD -j logaccept-0 + inet6/filter/FORWARD -j logaccept-0 + inet/filter/INPUT -j logaccept-0 + inet6/filter/INPUT -j logaccept-0 + inet/filter/OUTPUT -j logaccept-0 + inet6/filter/OUTPUT -j logaccept-0 + inet/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet/filter/logaccept-0 -j ACCEPT + inet6/filter/logaccept-0 -j ACCEPT + +Filter 4 {"action":"pass","log":true} +(address) + inet/filter/FORWARD -j logpass-0 + inet6/filter/FORWARD -j logpass-0 + inet/filter/INPUT -j logpass-0 + inet6/filter/INPUT -j logpass-0 + inet/filter/OUTPUT -j logpass-0 + inet6/filter/OUTPUT -j logpass-0 + inet/filter/logpass-0 -m limit --limit 1/second -j LOG + inet6/filter/logpass-0 -m limit --limit 1/second -j LOG + +Filter 5 {"dest":"172.16.0.0\/16"} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -d 172.16.0.0/16 -j ACCEPT + +Filter 6 {"action":"pass","dest":"172.16.0.0\/16"} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 + inet/filter/INPUT -d 172.16.0.0/16 + inet/filter/OUTPUT -d 172.16.0.0/16 + +Filter 7 {"dest":"172.16.0.0\/16","log":true} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 -j logaccept-1 + inet/filter/INPUT -d 172.16.0.0/16 -j logaccept-1 + inet/filter/OUTPUT -d 172.16.0.0/16 -j logaccept-1 + inet/filter/logaccept-1 -m limit --limit 1/second -j LOG + inet/filter/logaccept-1 -j ACCEPT + +Filter 8 {"action":"pass","dest":"172.16.0.0\/16","log":true} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 -j logpass-1 + inet/filter/INPUT -d 172.16.0.0/16 -j logpass-1 + inet/filter/OUTPUT -d 172.16.0.0/16 -j logpass-1 + inet/filter/logpass-1 -m limit --limit 1/second -j LOG + +Filter 9 {"dest":["172.16.0.0\/16","172.16.2.0\/16"]} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -d 172.16.2.0/16 -j ACCEPT + inet/filter/OUTPUT -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -d 172.16.2.0/16 -j ACCEPT + +Filter 10 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"]} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 + inet/filter/INPUT -d 172.16.0.0/16 + inet/filter/FORWARD -d 172.16.2.0/16 + inet/filter/INPUT -d 172.16.2.0/16 + inet/filter/OUTPUT -d 172.16.0.0/16 + inet/filter/OUTPUT -d 172.16.2.0/16 + +Filter 11 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 -j logaccept-2 + inet/filter/INPUT -d 172.16.0.0/16 -j logaccept-2 + inet/filter/FORWARD -d 172.16.2.0/16 -j logaccept-2 + inet/filter/INPUT -d 172.16.2.0/16 -j logaccept-2 + inet/filter/OUTPUT -d 172.16.0.0/16 -j logaccept-2 + inet/filter/OUTPUT -d 172.16.2.0/16 -j logaccept-2 + inet/filter/logaccept-2 -m limit --limit 1/second -j LOG + inet/filter/logaccept-2 -j ACCEPT + +Filter 12 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 -j logpass-2 + inet/filter/INPUT -d 172.16.0.0/16 -j logpass-2 + inet/filter/FORWARD -d 172.16.2.0/16 -j logpass-2 + inet/filter/INPUT -d 172.16.2.0/16 -j logpass-2 + inet/filter/OUTPUT -d 172.16.0.0/16 -j logpass-2 + inet/filter/OUTPUT -d 172.16.2.0/16 -j logpass-2 + inet/filter/logpass-2 -m limit --limit 1/second -j LOG + +Filter 13 {"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -j ACCEPT + +Filter 14 {"action":"pass","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 + inet/filter/INPUT -s 10.0.0.1 + inet/filter/OUTPUT -s 10.0.0.1 + +Filter 15 {"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -j logaccept-3 + inet/filter/INPUT -s 10.0.0.1 -j logaccept-3 + inet/filter/OUTPUT -s 10.0.0.1 -j logaccept-3 + inet/filter/logaccept-3 -m limit --limit 1/second -j LOG + inet/filter/logaccept-3 -j ACCEPT + +Filter 16 {"action":"pass","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -j logpass-3 + inet/filter/INPUT -s 10.0.0.1 -j logpass-3 + inet/filter/OUTPUT -s 10.0.0.1 -j logpass-3 + inet/filter/logpass-3 -m limit --limit 1/second -j LOG + +Filter 17 {"dest":"172.16.0.0\/16","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 18 {"action":"pass","dest":"172.16.0.0\/16","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 19 {"dest":"172.16.0.0\/16","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 + inet/filter/logaccept-4 -m limit --limit 1/second -j LOG + inet/filter/logaccept-4 -j ACCEPT + +Filter 20 {"action":"pass","dest":"172.16.0.0\/16","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 + inet/filter/logpass-4 -m limit --limit 1/second -j LOG + +Filter 21 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 22 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 23 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 + inet/filter/logaccept-5 -m limit --limit 1/second -j LOG + inet/filter/logaccept-5 -j ACCEPT + +Filter 24 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 + inet/filter/logpass-5 -m limit --limit 1/second -j LOG + +Filter 25 {"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -j ACCEPT + inet/filter/FORWARD -s 10.0.0.2 -j ACCEPT + inet/filter/INPUT -s 10.0.0.2 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.2 -j ACCEPT + +Filter 26 {"action":"pass","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 + inet/filter/INPUT -s 10.0.0.1 + inet/filter/FORWARD -s 10.0.0.2 + inet/filter/INPUT -s 10.0.0.2 + inet/filter/OUTPUT -s 10.0.0.1 + inet/filter/OUTPUT -s 10.0.0.2 + +Filter 27 {"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -j logaccept-6 + inet/filter/INPUT -s 10.0.0.1 -j logaccept-6 + inet/filter/FORWARD -s 10.0.0.2 -j logaccept-6 + inet/filter/INPUT -s 10.0.0.2 -j logaccept-6 + inet/filter/OUTPUT -s 10.0.0.1 -j logaccept-6 + inet/filter/OUTPUT -s 10.0.0.2 -j logaccept-6 + inet/filter/logaccept-6 -m limit --limit 1/second -j LOG + inet/filter/logaccept-6 -j ACCEPT + +Filter 28 {"action":"pass","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -j logpass-6 + inet/filter/INPUT -s 10.0.0.1 -j logpass-6 + inet/filter/FORWARD -s 10.0.0.2 -j logpass-6 + inet/filter/INPUT -s 10.0.0.2 -j logpass-6 + inet/filter/OUTPUT -s 10.0.0.1 -j logpass-6 + inet/filter/OUTPUT -s 10.0.0.2 -j logpass-6 + inet/filter/logpass-6 -m limit --limit 1/second -j LOG + +Filter 29 {"dest":"172.16.0.0\/16","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 30 {"action":"pass","dest":"172.16.0.0\/16","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 31 {"dest":"172.16.0.0\/16","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 + inet/filter/logaccept-7 -m limit --limit 1/second -j LOG + inet/filter/logaccept-7 -j ACCEPT + +Filter 32 {"action":"pass","dest":"172.16.0.0\/16","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 + inet/filter/logpass-7 -m limit --limit 1/second -j LOG + +Filter 33 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 34 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 35 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 + inet/filter/logaccept-8 -m limit --limit 1/second -j LOG + inet/filter/logaccept-8 -j ACCEPT + +Filter 36 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 + inet/filter/logpass-8 -m limit --limit 1/second -j LOG + +Filter 37 {"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT + +Filter 38 {"action":"pass","out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 + inet6/filter/FORWARD -o eth1 -d fc00::/7 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 + +Filter 39 {"log":true,"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j logaccept-9 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j logaccept-9 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j logaccept-9 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j logaccept-9 + inet/filter/logaccept-9 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-9 -m limit --limit 1/second -j LOG + inet/filter/logaccept-9 -j ACCEPT + inet6/filter/logaccept-9 -j ACCEPT + +Filter 40 {"action":"pass","log":true,"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j logpass-9 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j logpass-9 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j logpass-9 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j logpass-9 + inet/filter/logpass-9 -m limit --limit 1/second -j LOG + inet6/filter/logpass-9 -m limit --limit 1/second -j LOG + +Filter 41 {"dest":"172.16.0.0\/16","out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-0 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-0 + inet/filter/address-0 -d 172.16.0.0/16 -j ACCEPT + +Filter 42 {"action":"pass","dest":"172.16.0.0\/16","out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-1 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-1 + inet/filter/address-1 -d 172.16.0.0/16 + +Filter 43 {"dest":"172.16.0.0\/16","log":true,"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-2 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-2 + inet/filter/address-2 -d 172.16.0.0/16 -j logaccept-10 + inet/filter/logaccept-10 -m limit --limit 1/second -j LOG + inet/filter/logaccept-10 -j ACCEPT + +Filter 44 {"action":"pass","dest":"172.16.0.0\/16","log":true,"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-3 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-3 + inet/filter/address-3 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 45 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-4 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-4 + inet/filter/address-4 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-4 -d 172.16.2.0/16 -j ACCEPT + +Filter 46 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-5 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-5 + inet/filter/address-5 -d 172.16.0.0/16 + inet/filter/address-5 -d 172.16.2.0/16 + +Filter 47 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-6 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-6 + inet/filter/address-6 -d 172.16.0.0/16 -j logaccept-11 + inet/filter/address-6 -d 172.16.2.0/16 -j logaccept-11 + inet/filter/logaccept-11 -m limit --limit 1/second -j LOG + inet/filter/logaccept-11 -j ACCEPT + +Filter 48 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-7 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-7 + inet/filter/address-7 -d 172.16.0.0/16 -j logpass-10 + inet/filter/address-7 -d 172.16.2.0/16 -j logpass-10 + inet/filter/logpass-10 -m limit --limit 1/second -j LOG + +Filter 49 {"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT + +Filter 50 {"action":"pass","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 + +Filter 51 {"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 + inet/filter/logaccept-12 -m limit --limit 1/second -j LOG + inet/filter/logaccept-12 -j ACCEPT + +Filter 52 {"action":"pass","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 + inet/filter/logpass-11 -m limit --limit 1/second -j LOG + +Filter 53 {"dest":"172.16.0.0\/16","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-8 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-8 + inet/filter/address-8 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 54 {"action":"pass","dest":"172.16.0.0\/16","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-9 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-9 + inet/filter/address-9 -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 55 {"dest":"172.16.0.0\/16","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-10 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-10 + inet/filter/address-10 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-13 + inet/filter/logaccept-13 -m limit --limit 1/second -j LOG + inet/filter/logaccept-13 -j ACCEPT + +Filter 56 {"action":"pass","dest":"172.16.0.0\/16","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-11 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-11 + inet/filter/address-11 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 57 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-12 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-12 + inet/filter/address-12 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-12 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 58 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-13 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-13 + inet/filter/address-13 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-13 -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 59 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-14 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-14 + inet/filter/address-14 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-14 + inet/filter/address-14 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-14 + inet/filter/logaccept-14 -m limit --limit 1/second -j LOG + inet/filter/logaccept-14 -j ACCEPT + +Filter 60 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-15 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-15 + inet/filter/address-15 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-12 + inet/filter/address-15 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-12 + inet/filter/logpass-12 -m limit --limit 1/second -j LOG + +Filter 61 {"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT + +Filter 62 {"action":"pass","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 + +Filter 63 {"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 + inet/filter/logaccept-15 -m limit --limit 1/second -j LOG + inet/filter/logaccept-15 -j ACCEPT + +Filter 64 {"action":"pass","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 + inet/filter/logpass-13 -m limit --limit 1/second -j LOG + +Filter 65 {"dest":"172.16.0.0\/16","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-16 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-16 + inet/filter/address-16 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-16 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 66 {"action":"pass","dest":"172.16.0.0\/16","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-17 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-17 + inet/filter/address-17 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-17 -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 67 {"dest":"172.16.0.0\/16","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-18 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-18 + inet/filter/address-18 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-16 + inet/filter/address-18 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-16 + inet/filter/logaccept-16 -m limit --limit 1/second -j LOG + inet/filter/logaccept-16 -j ACCEPT + +Filter 68 {"action":"pass","dest":"172.16.0.0\/16","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-19 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-19 + inet/filter/address-19 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-14 + inet/filter/address-19 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-14 + inet/filter/logpass-14 -m limit --limit 1/second -j LOG + +Filter 69 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-20 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-20 + inet/filter/address-20 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-20 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/address-20 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-20 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 70 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-21 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-21 + inet/filter/address-21 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-21 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/address-21 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/address-21 -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 71 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-22 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-22 + inet/filter/address-22 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-17 + inet/filter/address-22 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-17 + inet/filter/address-22 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-17 + inet/filter/address-22 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-17 + inet/filter/logaccept-17 -m limit --limit 1/second -j LOG + inet/filter/logaccept-17 -j ACCEPT + +Filter 72 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-23 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-23 + inet/filter/address-23 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-15 + inet/filter/address-23 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-15 + inet/filter/address-23 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-15 + inet/filter/address-23 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-15 + inet/filter/logpass-15 -m limit --limit 1/second -j LOG + +Filter 73 {"in":"A"} +(address) + inet/filter/FORWARD -i eth0 -j ACCEPT + inet6/filter/FORWARD -i eth0 -j ACCEPT + inet/filter/INPUT -i eth0 -j ACCEPT + inet6/filter/INPUT -i eth0 -j ACCEPT + +Filter 74 {"action":"pass","in":"A"} +(address) + inet/filter/FORWARD -i eth0 + inet6/filter/FORWARD -i eth0 + inet/filter/INPUT -i eth0 + inet6/filter/INPUT -i eth0 + +Filter 75 {"in":"A","log":true} +(address) + inet/filter/FORWARD -i eth0 -j logaccept-18 + inet6/filter/FORWARD -i eth0 -j logaccept-18 + inet/filter/INPUT -i eth0 -j logaccept-18 + inet6/filter/INPUT -i eth0 -j logaccept-18 + inet/filter/logaccept-18 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-18 -m limit --limit 1/second -j LOG + inet/filter/logaccept-18 -j ACCEPT + inet6/filter/logaccept-18 -j ACCEPT + +Filter 76 {"action":"pass","in":"A","log":true} +(address) + inet/filter/FORWARD -i eth0 -j logpass-16 + inet6/filter/FORWARD -i eth0 -j logpass-16 + inet/filter/INPUT -i eth0 -j logpass-16 + inet6/filter/INPUT -i eth0 -j logpass-16 + inet/filter/logpass-16 -m limit --limit 1/second -j LOG + inet6/filter/logpass-16 -m limit --limit 1/second -j LOG + +Filter 77 {"dest":"172.16.0.0\/16","in":"A"} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT + +Filter 78 {"action":"pass","dest":"172.16.0.0\/16","in":"A"} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 + +Filter 79 {"dest":"172.16.0.0\/16","in":"A","log":true} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-19 + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-19 + inet/filter/logaccept-19 -m limit --limit 1/second -j LOG + inet/filter/logaccept-19 -j ACCEPT + +Filter 80 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-17 + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logpass-17 + inet/filter/logpass-17 -m limit --limit 1/second -j LOG + +Filter 81 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A"} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -d 172.16.2.0/16 -j ACCEPT + +Filter 82 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A"} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 + inet/filter/INPUT -i eth0 -d 172.16.2.0/16 + +Filter 83 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-20 + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-20 + inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 -j logaccept-20 + inet/filter/INPUT -i eth0 -d 172.16.2.0/16 -j logaccept-20 + inet/filter/logaccept-20 -m limit --limit 1/second -j LOG + inet/filter/logaccept-20 -j ACCEPT + +Filter 84 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-18 + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logpass-18 + inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 -j logpass-18 + inet/filter/INPUT -i eth0 -d 172.16.2.0/16 -j logpass-18 + inet/filter/logpass-18 -m limit --limit 1/second -j LOG + +Filter 85 {"in":"A","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -j ACCEPT + +Filter 86 {"action":"pass","in":"A","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 + inet/filter/INPUT -i eth0 -s 10.0.0.1 + +Filter 87 {"in":"A","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logaccept-21 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logaccept-21 + inet/filter/logaccept-21 -m limit --limit 1/second -j LOG + inet/filter/logaccept-21 -j ACCEPT + +Filter 88 {"action":"pass","in":"A","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logpass-19 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logpass-19 + inet/filter/logpass-19 -m limit --limit 1/second -j LOG + +Filter 89 {"dest":"172.16.0.0\/16","in":"A","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 90 {"action":"pass","dest":"172.16.0.0\/16","in":"A","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 91 {"dest":"172.16.0.0\/16","in":"A","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 + inet/filter/logaccept-22 -m limit --limit 1/second -j LOG + inet/filter/logaccept-22 -j ACCEPT + +Filter 92 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 + inet/filter/logpass-20 -m limit --limit 1/second -j LOG + +Filter 93 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 94 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 95 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 + inet/filter/logaccept-23 -m limit --limit 1/second -j LOG + inet/filter/logaccept-23 -j ACCEPT + +Filter 96 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 + inet/filter/logpass-21 -m limit --limit 1/second -j LOG + +Filter 97 {"in":"A","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -j ACCEPT + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.2 -j ACCEPT + +Filter 98 {"action":"pass","in":"A","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 + inet/filter/INPUT -i eth0 -s 10.0.0.1 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 + inet/filter/INPUT -i eth0 -s 10.0.0.2 + +Filter 99 {"in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logaccept-24 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logaccept-24 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -j logaccept-24 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -j logaccept-24 + inet/filter/logaccept-24 -m limit --limit 1/second -j LOG + inet/filter/logaccept-24 -j ACCEPT + +Filter 100 {"action":"pass","in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logpass-22 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logpass-22 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -j logpass-22 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -j logpass-22 + inet/filter/logpass-22 -m limit --limit 1/second -j LOG + +Filter 101 {"dest":"172.16.0.0\/16","in":"A","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 102 {"action":"pass","dest":"172.16.0.0\/16","in":"A","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 103 {"dest":"172.16.0.0\/16","in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 + inet/filter/logaccept-25 -m limit --limit 1/second -j LOG + inet/filter/logaccept-25 -j ACCEPT + +Filter 104 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 + inet/filter/logpass-23 -m limit --limit 1/second -j LOG + +Filter 105 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 106 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 107 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 + inet/filter/logaccept-26 -m limit --limit 1/second -j LOG + inet/filter/logaccept-26 -j ACCEPT + +Filter 108 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 + inet/filter/logpass-24 -m limit --limit 1/second -j LOG + +Filter 109 {"in":"A","out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT + +Filter 110 {"action":"pass","in":"A","out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 + +Filter 111 {"in":"A","log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j logaccept-27 + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j logaccept-27 + inet/filter/logaccept-27 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-27 -m limit --limit 1/second -j LOG + inet/filter/logaccept-27 -j ACCEPT + inet6/filter/logaccept-27 -j ACCEPT + +Filter 112 {"action":"pass","in":"A","log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG + +Filter 113 {"dest":"172.16.0.0\/16","in":"A","out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-24 + inet/filter/address-24 -d 172.16.0.0/16 -j ACCEPT + +Filter 114 {"action":"pass","dest":"172.16.0.0\/16","in":"A","out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-25 + inet/filter/address-25 -d 172.16.0.0/16 + +Filter 115 {"dest":"172.16.0.0\/16","in":"A","log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-26 + inet/filter/address-26 -d 172.16.0.0/16 -j logaccept-28 + inet/filter/logaccept-28 -m limit --limit 1/second -j LOG + inet/filter/logaccept-28 -j ACCEPT + +Filter 116 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-27 + inet/filter/address-27 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 117 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-28 + inet/filter/address-28 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-28 -d 172.16.2.0/16 -j ACCEPT + +Filter 118 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-29 + inet/filter/address-29 -d 172.16.0.0/16 + inet/filter/address-29 -d 172.16.2.0/16 + +Filter 119 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-30 + inet/filter/address-30 -d 172.16.0.0/16 -j logaccept-29 + inet/filter/address-30 -d 172.16.2.0/16 -j logaccept-29 + inet/filter/logaccept-29 -m limit --limit 1/second -j LOG + inet/filter/logaccept-29 -j ACCEPT + +Filter 120 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-31 + inet/filter/address-31 -d 172.16.0.0/16 -j logpass-25 + inet/filter/address-31 -d 172.16.2.0/16 -j logpass-25 + inet/filter/logpass-25 -m limit --limit 1/second -j LOG + +Filter 121 {"in":"A","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT + +Filter 122 {"action":"pass","in":"A","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 + +Filter 123 {"in":"A","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-30 + inet/filter/logaccept-30 -m limit --limit 1/second -j LOG + inet/filter/logaccept-30 -j ACCEPT + +Filter 124 {"action":"pass","in":"A","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG + +Filter 125 {"dest":"172.16.0.0\/16","in":"A","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-32 + inet/filter/address-32 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 126 {"action":"pass","dest":"172.16.0.0\/16","in":"A","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-33 + inet/filter/address-33 -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 127 {"dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-34 + inet/filter/address-34 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-31 + inet/filter/logaccept-31 -m limit --limit 1/second -j LOG + inet/filter/logaccept-31 -j ACCEPT + +Filter 128 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-35 + inet/filter/address-35 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 129 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-36 + inet/filter/address-36 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-36 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 130 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-37 + inet/filter/address-37 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-37 -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 131 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-38 + inet/filter/address-38 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-32 + inet/filter/address-38 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-32 + inet/filter/logaccept-32 -m limit --limit 1/second -j LOG + inet/filter/logaccept-32 -j ACCEPT + +Filter 132 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-39 + inet/filter/address-39 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-26 + inet/filter/address-39 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-26 + inet/filter/logpass-26 -m limit --limit 1/second -j LOG + +Filter 133 {"in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT + +Filter 134 {"action":"pass","in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 + +Filter 135 {"in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-33 + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-33 + inet/filter/logaccept-33 -m limit --limit 1/second -j LOG + inet/filter/logaccept-33 -j ACCEPT + +Filter 136 {"action":"pass","in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-27 + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-27 + inet/filter/logpass-27 -m limit --limit 1/second -j LOG + +Filter 137 {"dest":"172.16.0.0\/16","in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-40 + inet/filter/address-40 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-40 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 138 {"action":"pass","dest":"172.16.0.0\/16","in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-41 + inet/filter/address-41 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-41 -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 139 {"dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-42 + inet/filter/address-42 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-34 + inet/filter/address-42 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-34 + inet/filter/logaccept-34 -m limit --limit 1/second -j LOG + inet/filter/logaccept-34 -j ACCEPT + +Filter 140 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-43 + inet/filter/address-43 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-28 + inet/filter/address-43 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-28 + inet/filter/logpass-28 -m limit --limit 1/second -j LOG + +Filter 141 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-44 + inet/filter/address-44 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-44 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/address-44 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-44 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 142 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-45 + inet/filter/address-45 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-45 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/address-45 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/address-45 -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 143 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-46 + inet/filter/address-46 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-35 + inet/filter/address-46 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-35 + inet/filter/address-46 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-35 + inet/filter/address-46 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-35 + inet/filter/logaccept-35 -m limit --limit 1/second -j LOG + inet/filter/logaccept-35 -j ACCEPT + +Filter 144 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-47 + inet/filter/address-47 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-29 + inet/filter/address-47 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-29 + inet/filter/address-47 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-29 + inet/filter/address-47 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-29 + inet/filter/logpass-29 -m limit --limit 1/second -j LOG + +Filter 145 {"in":"B"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -j ACCEPT + inet6/filter/INPUT -i eth1 -s fc00::/7 -j ACCEPT + +Filter 146 {"action":"pass","in":"B"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 + inet6/filter/FORWARD -i eth1 -s fc00::/7 + inet6/filter/INPUT -i eth1 -s fc00::/7 + +Filter 147 {"in":"B","log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-36 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-36 + inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logaccept-36 + inet6/filter/INPUT -i eth1 -s fc00::/7 -j logaccept-36 + inet/filter/logaccept-36 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-36 -m limit --limit 1/second -j LOG + inet/filter/logaccept-36 -j ACCEPT + inet6/filter/logaccept-36 -j ACCEPT + +Filter 148 {"action":"pass","in":"B","log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-30 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logpass-30 + inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logpass-30 + inet6/filter/INPUT -i eth1 -s fc00::/7 -j logpass-30 + inet/filter/logpass-30 -m limit --limit 1/second -j LOG + inet6/filter/logpass-30 -m limit --limit 1/second -j LOG + +Filter 149 {"dest":"172.16.0.0\/16","in":"B"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + +Filter 150 {"action":"pass","dest":"172.16.0.0\/16","in":"B"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + +Filter 151 {"dest":"172.16.0.0\/16","in":"B","log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 + inet/filter/logaccept-37 -m limit --limit 1/second -j LOG + inet/filter/logaccept-37 -j ACCEPT + +Filter 152 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 + inet/filter/logpass-31 -m limit --limit 1/second -j LOG + +Filter 153 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT + +Filter 154 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 + +Filter 155 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 + inet/filter/logaccept-38 -m limit --limit 1/second -j LOG + inet/filter/logaccept-38 -j ACCEPT + +Filter 156 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 + inet/filter/logpass-32 -m limit --limit 1/second -j LOG + +Filter 157 {"in":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-48 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-48 + inet/filter/address-48 -s 10.0.0.1 -j ACCEPT + +Filter 158 {"action":"pass","in":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-49 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-49 + inet/filter/address-49 -s 10.0.0.1 + +Filter 159 {"in":"B","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-50 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-50 + inet/filter/address-50 -s 10.0.0.1 -j logaccept-39 + inet/filter/logaccept-39 -m limit --limit 1/second -j LOG + inet/filter/logaccept-39 -j ACCEPT + +Filter 160 {"action":"pass","in":"B","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-51 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-51 + inet/filter/address-51 -s 10.0.0.1 -m limit --limit 1/second -j LOG + +Filter 161 {"dest":"172.16.0.0\/16","in":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-52 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-52 + inet/filter/address-52 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 162 {"action":"pass","dest":"172.16.0.0\/16","in":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-53 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-53 + inet/filter/address-53 -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 163 {"dest":"172.16.0.0\/16","in":"B","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-54 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-54 + inet/filter/address-54 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-40 + inet/filter/logaccept-40 -m limit --limit 1/second -j LOG + inet/filter/logaccept-40 -j ACCEPT + +Filter 164 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-55 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-55 + inet/filter/address-55 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 165 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-56 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-56 + inet/filter/address-56 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-56 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 166 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-57 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-57 + inet/filter/address-57 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-57 -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 167 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-58 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-58 + inet/filter/address-58 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-41 + inet/filter/address-58 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-41 + inet/filter/logaccept-41 -m limit --limit 1/second -j LOG + inet/filter/logaccept-41 -j ACCEPT + +Filter 168 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-59 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-59 + inet/filter/address-59 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-33 + inet/filter/address-59 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-33 + inet/filter/logpass-33 -m limit --limit 1/second -j LOG + +Filter 169 {"in":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-60 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-60 + inet/filter/address-60 -s 10.0.0.1 -j ACCEPT + inet/filter/address-60 -s 10.0.0.2 -j ACCEPT + +Filter 170 {"action":"pass","in":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-61 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-61 + inet/filter/address-61 -s 10.0.0.1 + inet/filter/address-61 -s 10.0.0.2 + +Filter 171 {"in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-62 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-62 + inet/filter/address-62 -s 10.0.0.1 -j logaccept-42 + inet/filter/address-62 -s 10.0.0.2 -j logaccept-42 + inet/filter/logaccept-42 -m limit --limit 1/second -j LOG + inet/filter/logaccept-42 -j ACCEPT + +Filter 172 {"action":"pass","in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-63 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-63 + inet/filter/address-63 -s 10.0.0.1 -j logpass-34 + inet/filter/address-63 -s 10.0.0.2 -j logpass-34 + inet/filter/logpass-34 -m limit --limit 1/second -j LOG + +Filter 173 {"dest":"172.16.0.0\/16","in":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-64 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-64 + inet/filter/address-64 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-64 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 174 {"action":"pass","dest":"172.16.0.0\/16","in":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-65 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-65 + inet/filter/address-65 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-65 -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 175 {"dest":"172.16.0.0\/16","in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-66 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-66 + inet/filter/address-66 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-43 + inet/filter/address-66 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-43 + inet/filter/logaccept-43 -m limit --limit 1/second -j LOG + inet/filter/logaccept-43 -j ACCEPT + +Filter 176 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-67 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-67 + inet/filter/address-67 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-35 + inet/filter/address-67 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-35 + inet/filter/logpass-35 -m limit --limit 1/second -j LOG + +Filter 177 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-68 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-68 + inet/filter/address-68 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-68 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/address-68 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-68 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 178 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-69 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-69 + inet/filter/address-69 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-69 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/address-69 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/address-69 -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 179 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-70 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-70 + inet/filter/address-70 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-44 + inet/filter/address-70 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-44 + inet/filter/address-70 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-44 + inet/filter/address-70 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-44 + inet/filter/logaccept-44 -m limit --limit 1/second -j LOG + inet/filter/logaccept-44 -j ACCEPT + +Filter 180 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-71 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-71 + inet/filter/address-71 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-36 + inet/filter/address-71 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-36 + inet/filter/address-71 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-36 + inet/filter/address-71 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-36 + inet/filter/logpass-36 -m limit --limit 1/second -j LOG + +Filter 181 {"in":"B","out":"B"} +(address) + +Filter 182 {"action":"pass","in":"B","out":"B"} +(address) + +Filter 183 {"in":"B","log":true,"out":"B"} +(address) + +Filter 184 {"action":"pass","in":"B","log":true,"out":"B"} +(address) + +Filter 185 {"dest":"172.16.0.0\/16","in":"B","out":"B"} +(address) + +Filter 186 {"action":"pass","dest":"172.16.0.0\/16","in":"B","out":"B"} +(address) + +Filter 187 {"dest":"172.16.0.0\/16","in":"B","log":true,"out":"B"} +(address) + +Filter 188 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"out":"B"} +(address) + +Filter 189 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B"} +(address) + +Filter 190 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B"} +(address) + +Filter 191 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B"} +(address) + +Filter 192 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B"} +(address) + +Filter 193 {"in":"B","out":"B","src":"10.0.0.1"} +(address) + +Filter 194 {"action":"pass","in":"B","out":"B","src":"10.0.0.1"} +(address) + +Filter 195 {"in":"B","log":true,"out":"B","src":"10.0.0.1"} +(address) + +Filter 196 {"action":"pass","in":"B","log":true,"out":"B","src":"10.0.0.1"} +(address) + +Filter 197 {"dest":"172.16.0.0\/16","in":"B","out":"B","src":"10.0.0.1"} +(address) + +Filter 198 {"action":"pass","dest":"172.16.0.0\/16","in":"B","out":"B","src":"10.0.0.1"} +(address) + +Filter 199 {"dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":"10.0.0.1"} +(address) + +Filter 200 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":"10.0.0.1"} +(address) + +Filter 201 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":"10.0.0.1"} +(address) + +Filter 202 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":"10.0.0.1"} +(address) + +Filter 203 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":"10.0.0.1"} +(address) + +Filter 204 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":"10.0.0.1"} +(address) + +Filter 205 {"in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 206 {"action":"pass","in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 207 {"in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 208 {"action":"pass","in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 209 {"dest":"172.16.0.0\/16","in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 210 {"action":"pass","dest":"172.16.0.0\/16","in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 211 {"dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 212 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 213 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 214 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 215 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 216 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 217 {"in":["B","C"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -j ACCEPT + inet6/filter/INPUT -i eth1 -s fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j ACCEPT + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j ACCEPT + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j ACCEPT + +Filter 218 {"action":"pass","in":["B","C"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 + inet6/filter/FORWARD -i eth1 -s fc00::/7 + inet6/filter/INPUT -i eth1 -s fc00::/7 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 + +Filter 219 {"in":["B","C"],"log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-45 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-45 + inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logaccept-45 + inet6/filter/INPUT -i eth1 -s fc00::/7 -j logaccept-45 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j logaccept-45 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j logaccept-45 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j logaccept-45 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j logaccept-45 + inet/filter/logaccept-45 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-45 -m limit --limit 1/second -j LOG + inet/filter/logaccept-45 -j ACCEPT + inet6/filter/logaccept-45 -j ACCEPT + +Filter 220 {"action":"pass","in":["B","C"],"log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-37 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logpass-37 + inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logpass-37 + inet6/filter/INPUT -i eth1 -s fc00::/7 -j logpass-37 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j logpass-37 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j logpass-37 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j logpass-37 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j logpass-37 + inet/filter/logpass-37 -m limit --limit 1/second -j LOG + inet6/filter/logpass-37 -m limit --limit 1/second -j LOG + +Filter 221 {"dest":"172.16.0.0\/16","in":["B","C"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + +Filter 222 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 + +Filter 223 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 + inet/filter/logaccept-46 -m limit --limit 1/second -j LOG + inet/filter/logaccept-46 -j ACCEPT + +Filter 224 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 + inet/filter/logpass-38 -m limit --limit 1/second -j LOG + +Filter 225 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT + +Filter 226 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 + +Filter 227 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 + inet/filter/logaccept-47 -m limit --limit 1/second -j LOG + inet/filter/logaccept-47 -j ACCEPT + +Filter 228 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 + inet/filter/logpass-39 -m limit --limit 1/second -j LOG + +Filter 229 {"in":["B","C"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-72 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-72 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-72 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-72 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-72 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-72 + inet/filter/address-72 -s 10.0.0.1 -j ACCEPT + +Filter 230 {"action":"pass","in":["B","C"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-73 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-73 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-73 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-73 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-73 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-73 + inet/filter/address-73 -s 10.0.0.1 + +Filter 231 {"in":["B","C"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-74 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-74 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-74 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-74 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-74 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-74 + inet/filter/address-74 -s 10.0.0.1 -j logaccept-48 + inet/filter/logaccept-48 -m limit --limit 1/second -j LOG + inet/filter/logaccept-48 -j ACCEPT + +Filter 232 {"action":"pass","in":["B","C"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-75 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-75 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-75 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-75 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-75 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-75 + inet/filter/address-75 -s 10.0.0.1 -m limit --limit 1/second -j LOG + +Filter 233 {"dest":"172.16.0.0\/16","in":["B","C"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-76 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-76 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-76 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-76 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-76 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-76 + inet/filter/address-76 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 234 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-77 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-77 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-77 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-77 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-77 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-77 + inet/filter/address-77 -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 235 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-78 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-78 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-78 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-78 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-78 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-78 + inet/filter/address-78 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-49 + inet/filter/logaccept-49 -m limit --limit 1/second -j LOG + inet/filter/logaccept-49 -j ACCEPT + +Filter 236 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-79 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-79 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-79 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-79 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-79 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-79 + inet/filter/address-79 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 237 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-80 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-80 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-80 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-80 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-80 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-80 + inet/filter/address-80 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-80 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 238 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-81 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-81 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-81 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-81 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-81 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-81 + inet/filter/address-81 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-81 -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 239 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-82 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-82 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-82 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-82 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-82 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-82 + inet/filter/address-82 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-50 + inet/filter/address-82 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-50 + inet/filter/logaccept-50 -m limit --limit 1/second -j LOG + inet/filter/logaccept-50 -j ACCEPT + +Filter 240 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-83 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-83 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-83 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-83 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-83 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-83 + inet/filter/address-83 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-40 + inet/filter/address-83 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-40 + inet/filter/logpass-40 -m limit --limit 1/second -j LOG + +Filter 241 {"in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-84 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-84 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-84 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-84 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-84 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-84 + inet/filter/address-84 -s 10.0.0.1 -j ACCEPT + inet/filter/address-84 -s 10.0.0.2 -j ACCEPT + +Filter 242 {"action":"pass","in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-85 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-85 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-85 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-85 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-85 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-85 + inet/filter/address-85 -s 10.0.0.1 + inet/filter/address-85 -s 10.0.0.2 + +Filter 243 {"in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-86 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-86 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-86 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-86 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-86 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-86 + inet/filter/address-86 -s 10.0.0.1 -j logaccept-51 + inet/filter/address-86 -s 10.0.0.2 -j logaccept-51 + inet/filter/logaccept-51 -m limit --limit 1/second -j LOG + inet/filter/logaccept-51 -j ACCEPT + +Filter 244 {"action":"pass","in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-87 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-87 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-87 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-87 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-87 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-87 + inet/filter/address-87 -s 10.0.0.1 -j logpass-41 + inet/filter/address-87 -s 10.0.0.2 -j logpass-41 + inet/filter/logpass-41 -m limit --limit 1/second -j LOG + +Filter 245 {"dest":"172.16.0.0\/16","in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-88 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-88 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-88 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-88 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-88 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-88 + inet/filter/address-88 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-88 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 246 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-89 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-89 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-89 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-89 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-89 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-89 + inet/filter/address-89 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-89 -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 247 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-90 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-90 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-90 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-90 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-90 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-90 + inet/filter/address-90 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-52 + inet/filter/address-90 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-52 + inet/filter/logaccept-52 -m limit --limit 1/second -j LOG + inet/filter/logaccept-52 -j ACCEPT + +Filter 248 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-91 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-91 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-91 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-91 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-91 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-91 + inet/filter/address-91 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-42 + inet/filter/address-91 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-42 + inet/filter/logpass-42 -m limit --limit 1/second -j LOG + +Filter 249 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-92 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-92 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-92 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-92 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-92 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-92 + inet/filter/address-92 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-92 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/address-92 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-92 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 250 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-93 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-93 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-93 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-93 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-93 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-93 + inet/filter/address-93 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-93 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/address-93 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/address-93 -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 251 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-94 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-94 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-94 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-94 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-94 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-94 + inet/filter/address-94 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-53 + inet/filter/address-94 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-53 + inet/filter/address-94 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-53 + inet/filter/address-94 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-53 + inet/filter/logaccept-53 -m limit --limit 1/second -j LOG + inet/filter/logaccept-53 -j ACCEPT + +Filter 252 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-95 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-95 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-95 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-95 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-95 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-95 + inet/filter/address-95 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-43 + inet/filter/address-95 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-43 + inet/filter/address-95 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-43 + inet/filter/address-95 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-43 + inet/filter/logpass-43 -m limit --limit 1/second -j LOG + +Filter 253 {"in":["B","C"],"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + +Filter 254 {"action":"pass","in":["B","C"],"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 + +Filter 255 {"in":["B","C"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 + inet/filter/logaccept-54 -m limit --limit 1/second -j LOG + inet/filter/logaccept-54 -j ACCEPT + +Filter 256 {"action":"pass","in":["B","C"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 + inet/filter/logpass-44 -m limit --limit 1/second -j LOG + +Filter 257 {"dest":"172.16.0.0\/16","in":["B","C"],"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 + inet/filter/address-96 -d 172.16.0.0/16 -j ACCEPT + +Filter 258 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 + inet/filter/address-97 -d 172.16.0.0/16 + +Filter 259 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 + inet/filter/address-98 -d 172.16.0.0/16 -j logaccept-55 + inet/filter/logaccept-55 -m limit --limit 1/second -j LOG + inet/filter/logaccept-55 -j ACCEPT + +Filter 260 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 + inet/filter/address-99 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 261 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 + inet/filter/address-100 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-100 -d 172.16.2.0/16 -j ACCEPT + +Filter 262 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 + inet/filter/address-101 -d 172.16.0.0/16 + inet/filter/address-101 -d 172.16.2.0/16 + +Filter 263 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 + inet/filter/address-102 -d 172.16.0.0/16 -j logaccept-56 + inet/filter/address-102 -d 172.16.2.0/16 -j logaccept-56 + inet/filter/logaccept-56 -m limit --limit 1/second -j LOG + inet/filter/logaccept-56 -j ACCEPT + +Filter 264 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 + inet/filter/address-103 -d 172.16.0.0/16 -j logpass-45 + inet/filter/address-103 -d 172.16.2.0/16 -j logpass-45 + inet/filter/logpass-45 -m limit --limit 1/second -j LOG + +Filter 265 {"in":["B","C"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 + inet/filter/address-104 -s 10.0.0.1 -j ACCEPT + +Filter 266 {"action":"pass","in":["B","C"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 + inet/filter/address-105 -s 10.0.0.1 + +Filter 267 {"in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 + inet/filter/address-106 -s 10.0.0.1 -j logaccept-57 + inet/filter/logaccept-57 -m limit --limit 1/second -j LOG + inet/filter/logaccept-57 -j ACCEPT + +Filter 268 {"action":"pass","in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 + inet/filter/address-107 -s 10.0.0.1 -m limit --limit 1/second -j LOG + +Filter 269 {"dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 + inet/filter/address-108 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 270 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 + inet/filter/address-109 -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 271 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 + inet/filter/address-110 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-58 + inet/filter/logaccept-58 -m limit --limit 1/second -j LOG + inet/filter/logaccept-58 -j ACCEPT + +Filter 272 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 + inet/filter/address-111 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 273 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 + inet/filter/address-112 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-112 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 274 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 + inet/filter/address-113 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-113 -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 275 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 + inet/filter/address-114 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-59 + inet/filter/address-114 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-59 + inet/filter/logaccept-59 -m limit --limit 1/second -j LOG + inet/filter/logaccept-59 -j ACCEPT + +Filter 276 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 + inet/filter/address-115 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-46 + inet/filter/address-115 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-46 + inet/filter/logpass-46 -m limit --limit 1/second -j LOG + +Filter 277 {"in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 + inet/filter/address-116 -s 10.0.0.1 -j ACCEPT + inet/filter/address-116 -s 10.0.0.2 -j ACCEPT + +Filter 278 {"action":"pass","in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 + inet/filter/address-117 -s 10.0.0.1 + inet/filter/address-117 -s 10.0.0.2 + +Filter 279 {"in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 + inet/filter/address-118 -s 10.0.0.1 -j logaccept-60 + inet/filter/address-118 -s 10.0.0.2 -j logaccept-60 + inet/filter/logaccept-60 -m limit --limit 1/second -j LOG + inet/filter/logaccept-60 -j ACCEPT + +Filter 280 {"action":"pass","in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 + inet/filter/address-119 -s 10.0.0.1 -j logpass-47 + inet/filter/address-119 -s 10.0.0.2 -j logpass-47 + inet/filter/logpass-47 -m limit --limit 1/second -j LOG + +Filter 281 {"dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 + inet/filter/address-120 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-120 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 282 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 + inet/filter/address-121 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-121 -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 283 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 + inet/filter/address-122 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-61 + inet/filter/address-122 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-61 + inet/filter/logaccept-61 -m limit --limit 1/second -j LOG + inet/filter/logaccept-61 -j ACCEPT + +Filter 284 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 + inet/filter/address-123 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-48 + inet/filter/address-123 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-48 + inet/filter/logpass-48 -m limit --limit 1/second -j LOG + +Filter 285 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 + inet/filter/address-124 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-124 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/address-124 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-124 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 286 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 + inet/filter/address-125 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-125 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/address-125 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/address-125 -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 287 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 + inet/filter/address-126 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-62 + inet/filter/address-126 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-62 + inet/filter/address-126 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-62 + inet/filter/address-126 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-62 + inet/filter/logaccept-62 -m limit --limit 1/second -j LOG + inet/filter/logaccept-62 -j ACCEPT + +Filter 288 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 + inet/filter/address-127 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-49 + inet/filter/address-127 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-49 + inet/filter/address-127 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-49 + inet/filter/address-127 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-49 + inet/filter/logpass-49 -m limit --limit 1/second -j LOG + +Filter 289 {} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 290 {"action":"drop"} +(log) + inet/filter/FORWARD -j logdrop-0 + inet6/filter/FORWARD -j logdrop-0 + inet/filter/INPUT -j logdrop-0 + inet6/filter/INPUT -j logdrop-0 + inet/filter/OUTPUT -j logdrop-0 + inet6/filter/OUTPUT -j logdrop-0 + inet/filter/logdrop-0 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-0 -m limit --limit 1/second -j LOG + inet/filter/logdrop-0 -j DROP + inet6/filter/logdrop-0 -j DROP + +Filter 291 {"action":"pass"} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 292 {"log":false} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 293 {"action":"drop","log":false} +(log) + inet/filter/FORWARD -j DROP + inet6/filter/FORWARD -j DROP + inet/filter/INPUT -j DROP + inet6/filter/INPUT -j DROP + inet/filter/OUTPUT -j DROP + inet6/filter/OUTPUT -j DROP + +Filter 294 {"action":"pass","log":false} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 295 {"log":true} +(log) + inet/filter/FORWARD -j logaccept-63 + inet6/filter/FORWARD -j logaccept-63 + inet/filter/INPUT -j logaccept-63 + inet6/filter/INPUT -j logaccept-63 + inet/filter/OUTPUT -j logaccept-63 + inet6/filter/OUTPUT -j logaccept-63 + inet/filter/logaccept-63 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-63 -m limit --limit 1/second -j LOG + inet/filter/logaccept-63 -j ACCEPT + inet6/filter/logaccept-63 -j ACCEPT + +Filter 296 {"action":"drop","log":true} +(log) + inet/filter/FORWARD -j logdrop-1 + inet6/filter/FORWARD -j logdrop-1 + inet/filter/INPUT -j logdrop-1 + inet6/filter/INPUT -j logdrop-1 + inet/filter/OUTPUT -j logdrop-1 + inet6/filter/OUTPUT -j logdrop-1 + inet/filter/logdrop-1 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1 -j DROP + inet6/filter/logdrop-1 -j DROP + +Filter 297 {"action":"pass","log":true} +(log) + inet/filter/FORWARD -j logpass-50 + inet6/filter/FORWARD -j logpass-50 + inet/filter/INPUT -j logpass-50 + inet6/filter/INPUT -j logpass-50 + inet/filter/OUTPUT -j logpass-50 + inet6/filter/OUTPUT -j logpass-50 + inet/filter/logpass-50 -m limit --limit 1/second -j LOG + inet6/filter/logpass-50 -m limit --limit 1/second -j LOG + +Filter 298 {"log":"none"} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 299 {"action":"drop","log":"none"} +(log) + inet/filter/FORWARD -j DROP + inet6/filter/FORWARD -j DROP + inet/filter/INPUT -j DROP + inet6/filter/INPUT -j DROP + inet/filter/OUTPUT -j DROP + inet6/filter/OUTPUT -j DROP + +Filter 300 {"action":"pass","log":"none"} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 301 {"in":["_fw","A"]} +(zone) + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + inet/filter/FORWARD -i eth0 -j ACCEPT + inet6/filter/FORWARD -i eth0 -j ACCEPT + inet/filter/INPUT -i eth0 -j ACCEPT + inet6/filter/INPUT -i eth0 -j ACCEPT + +Filter 302 {"in":"B","out":"C"} +(zone) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + +Filter 303 {"out":["_fw","B"]} +(zone) + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT + +Filter 304 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} +(zone) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT + + +Ipset awall-masquerade {"family":"inet","type":"hash:net"} +(masquerade) + + +Limit B true +(limit) + +Limit C 7 +(limit) + +Limit D {"inet":22,"inet6":58} +(limit) + + +Log _default {"limit":1} +(defaults) + +Log none {"mode":"none"} +(log) + + +Mark 1 {"in":["_fw","A"],"mark":0} +(zone) + inet/mangle/OUTPUT -j MARK --set-mark 0 + inet6/mangle/OUTPUT -j MARK --set-mark 0 + inet/mangle/PREROUTING -i eth0 -j MARK --set-mark 0 + inet6/mangle/PREROUTING -i eth0 -j MARK --set-mark 0 + +Mark 2 {"in":"B","mark":1,"out":"C"} +(zone) + inet/mangle/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 + inet/mangle/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 + +Mark 3 {"mark":2,"out":["_fw","B"]} +(zone) + inet/mangle/INPUT -j MARK --set-mark 2 + inet6/mangle/INPUT -j MARK --set-mark 2 + inet/mangle/POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 + inet6/mangle/POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 + + +No-track 1 {"in":["_fw","A"]} +(zone) + inet/raw/OUTPUT -j CT --notrack + inet6/raw/OUTPUT -j CT --notrack + inet/raw/PREROUTING -i eth0 -j CT --notrack + inet6/raw/PREROUTING -i eth0 -j CT --notrack + +No-track 2 {"in":"B"} +(zone) + inet/raw/PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack + inet6/raw/PREROUTING -i eth1 -s fc00::/7 -j CT --notrack + +No-track 3 {"out":"_fw"} +(zone) + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack + + +Service babel {"port":6697,"proto":"tcp"} +(services) + +Service bacula-dir {"port":9101,"proto":"tcp"} +(services) + +Service bacula-fd {"port":9102,"proto":"tcp"} +(services) + +Service bacula-sd {"port":9103,"proto":"tcp"} +(services) + +Service bgp {"port":179,"proto":"tcp"} +(services) + +Service dhcp {"family":"inet","port":[67,68],"proto":"udp"} +(services) + +Service discard [{"port":9,"proto":"udp"},{"port":9,"proto":"tcp"}] +(services) + +Service dns [{"port":53,"proto":"udp"},{"port":53,"proto":"tcp"}] +(services) + +Service epmap [{"port":135,"proto":"tcp"},{"port":135,"proto":"udp"}] +(services) + +Service ftp {"ct-helper":"ftp","port":21,"proto":"tcp"} +(services) + +Service gre {"proto":"gre"} +(services) + +Service hp-pdl {"port":9100,"proto":"tcp"} +(services) + +Service http {"port":80,"proto":"tcp"} +(services) + +Service http-alt {"port":8080,"proto":"tcp"} +(services) + +Service https {"port":443,"proto":"tcp"} +(services) + +Service icmp {"proto":"icmp"} +(services) + +Service igmp {"proto":"igmp"} +(services) + +Service imap {"port":143,"proto":"tcp"} +(services) + +Service imaps {"port":993,"proto":"tcp"} +(services) + +Service ipsec [{"proto":"esp"},{"port":[500,4500],"proto":"udp"}] +(services) + +Service irc {"ct-helper":"irc","port":6667,"proto":"tcp"} +(services) + +Service kerberos [{"port":88,"proto":"tcp"},{"port":88,"proto":"udp"}] +(services) + +Service kpasswd [{"port":464,"proto":"tcp"},{"port":464,"proto":"udp"}] +(services) + +Service l2tp {"port":1701,"proto":"udp"} +(services) + +Service ldap [{"port":389,"proto":"tcp"},{"port":389,"proto":"udp"}] +(services) + +Service ldaps [{"port":636,"proto":"tcp"},{"port":636,"proto":"udp"}] +(services) + +Service microsoft-ds [{"port":445,"proto":"tcp"},{"port":445,"proto":"udp"}] +(services) + +Service ms-sql-m {"port":1434,"proto":"tcp"} +(services) + +Service ms-sql-s {"port":1433,"proto":"tcp"} +(services) + +Service msft-gc [{"port":3268,"proto":"tcp"},{"port":3268,"proto":"udp"}] +(services) + +Service msft-gc-ssl [{"port":3269,"proto":"tcp"},{"port":3269,"proto":"udp"}] +(services) + +Service netbios-ds [{"port":138,"proto":"tcp"},{"port":138,"proto":"udp"}] +(services) + +Service netbios-ns [{"family":"inet","port":137,"proto":"tcp"},{"ct-helper":"netbios-ns","family":"inet","port":137,"proto":"udp"}] +(services) + +Service netbios-ssn [{"port":139,"proto":"tcp"},{"port":139,"proto":"udp"}] +(services) + +Service ntp {"port":123,"proto":"udp"} +(services) + +Service ospf {"proto":"ospf"} +(services) + +Service pgsql {"port":5432,"proto":"tcp"} +(services) + +Service ping [{"proto":"icmp","reply-type":0,"type":8},{"proto":"icmpv6","reply-type":129,"type":128}] +(services) + +Service pop3 {"port":110,"proto":"tcp"} +(services) + +Service pop3s {"port":995,"proto":"tcp"} +(services) + +Service radius [{"port":1812,"proto":"udp"},{"port":1812,"proto":"tcp"}] +(services) + +Service radius-acct [{"port":1813,"proto":"udp"},{"port":1813,"proto":"tcp"}] +(services) + +Service rdp {"port":3389,"proto":"tcp"} +(services) + +Service rsync {"port":873,"proto":"tcp"} +(services) + +Service rtmp {"port":1935,"proto":"tcp"} +(services) + +Service rtsp {"port":554,"proto":"tcp"} +(services) + +Service sieve {"port":4190,"proto":"tcp"} +(services) + +Service sip [{"ct-helper":"sip","port":5060,"proto":"udp"},{"ct-helper":"sip","port":5060,"proto":"tcp"}] +(services) + +Service sip-tls [{"port":5061,"proto":"udp"},{"port":5061,"proto":"tcp"}] +(services) + +Service smtp {"port":25,"proto":"tcp"} +(services) + +Service snmp {"port":161,"proto":"udp"} +(services) + +Service snmp-trap {"port":162,"proto":"udp"} +(services) + +Service ssh {"port":22,"proto":"tcp"} +(services) + +Service submission {"port":587,"proto":"tcp"} +(services) + +Service syslog {"port":514,"proto":"udp"} +(services) + +Service telnet {"port":23,"proto":"tcp"} +(services) + +Service teredo {"port":3544,"proto":"udp"} +(services) + +Service tftp {"port":69,"proto":"udp"} +(services) + +Service vnc {"port":5900,"proto":"tcp"} +(services) + + +Snat 1 {"out":["_fw","B"]} +(zone) + inet/nat/INPUT -j MASQUERADE + inet/nat/POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE + + +Variable awall_tproxy_mark 1 +(defaults) + + +Zone A {"iface":"eth0"} +(zone) + +Zone B {"addr":["10.0.0.0\/12","fc00::\/7"],"iface":"eth1"} +(zone) + +Zone C {"addr":"10.1.0.0\/12","iface":["eth2","eth3"]} +(zone) + +Zone D {"iface":["eth4","eth5"],"route-back":true} +(zone) + +Zone E {"ipsec":true} +(zone) + + +# ipset awall-masquerade +hash:net family inet + + +# rules-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:address-0 - [0:0] +:address-1 - [0:0] +:address-10 - [0:0] +:address-100 - [0:0] +:address-101 - [0:0] +:address-102 - [0:0] +:address-103 - [0:0] +:address-104 - [0:0] +:address-105 - [0:0] +:address-106 - [0:0] +:address-107 - [0:0] +:address-108 - [0:0] +:address-109 - [0:0] +:address-11 - [0:0] +:address-110 - [0:0] +:address-111 - [0:0] +:address-112 - [0:0] +:address-113 - [0:0] +:address-114 - [0:0] +:address-115 - [0:0] +:address-116 - [0:0] +:address-117 - [0:0] +:address-118 - [0:0] +:address-119 - [0:0] +:address-12 - [0:0] +:address-120 - [0:0] +:address-121 - [0:0] +:address-122 - [0:0] +:address-123 - [0:0] +:address-124 - [0:0] +:address-125 - [0:0] +:address-126 - [0:0] +:address-127 - [0:0] +:address-13 - [0:0] +:address-14 - [0:0] +:address-15 - [0:0] +:address-16 - [0:0] +:address-17 - [0:0] +:address-18 - [0:0] +:address-19 - [0:0] +:address-2 - [0:0] +:address-20 - [0:0] +:address-21 - [0:0] +:address-22 - [0:0] +:address-23 - [0:0] +:address-24 - [0:0] +:address-25 - [0:0] +:address-26 - [0:0] +:address-27 - [0:0] +:address-28 - [0:0] +:address-29 - [0:0] +:address-3 - [0:0] +:address-30 - [0:0] +:address-31 - [0:0] +:address-32 - [0:0] +:address-33 - [0:0] +:address-34 - [0:0] +:address-35 - [0:0] +:address-36 - [0:0] +:address-37 - [0:0] +:address-38 - [0:0] +:address-39 - [0:0] +:address-4 - [0:0] +:address-40 - [0:0] +:address-41 - [0:0] +:address-42 - [0:0] +:address-43 - [0:0] +:address-44 - [0:0] +:address-45 - [0:0] +:address-46 - [0:0] +:address-47 - [0:0] +:address-48 - [0:0] +:address-49 - [0:0] +:address-5 - [0:0] +:address-50 - [0:0] +:address-51 - [0:0] +:address-52 - [0:0] +:address-53 - [0:0] +:address-54 - [0:0] +:address-55 - [0:0] +:address-56 - [0:0] +:address-57 - [0:0] +:address-58 - [0:0] +:address-59 - [0:0] +:address-6 - [0:0] +:address-60 - [0:0] +:address-61 - [0:0] +:address-62 - [0:0] +:address-63 - [0:0] +:address-64 - [0:0] +:address-65 - [0:0] +:address-66 - [0:0] +:address-67 - [0:0] +:address-68 - [0:0] +:address-69 - [0:0] +:address-7 - [0:0] +:address-70 - [0:0] +:address-71 - [0:0] +:address-72 - [0:0] +:address-73 - [0:0] +:address-74 - [0:0] +:address-75 - [0:0] +:address-76 - [0:0] +:address-77 - [0:0] +:address-78 - [0:0] +:address-79 - [0:0] +:address-8 - [0:0] +:address-80 - [0:0] +:address-81 - [0:0] +:address-82 - [0:0] +:address-83 - [0:0] +:address-84 - [0:0] +:address-85 - [0:0] +:address-86 - [0:0] +:address-87 - [0:0] +:address-88 - [0:0] +:address-89 - [0:0] +:address-9 - [0:0] +:address-90 - [0:0] +:address-91 - [0:0] +:address-92 - [0:0] +:address-93 - [0:0] +:address-94 - [0:0] +:address-95 - [0:0] +:address-96 - [0:0] +:address-97 - [0:0] +:address-98 - [0:0] +:address-99 - [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logaccept-1 - [0:0] +:logaccept-10 - [0:0] +:logaccept-11 - [0:0] +:logaccept-12 - [0:0] +:logaccept-13 - [0:0] +:logaccept-14 - [0:0] +:logaccept-15 - [0:0] +:logaccept-16 - [0:0] +:logaccept-17 - [0:0] +:logaccept-18 - [0:0] +:logaccept-19 - [0:0] +:logaccept-2 - [0:0] +:logaccept-20 - [0:0] +:logaccept-21 - [0:0] +:logaccept-22 - [0:0] +:logaccept-23 - [0:0] +:logaccept-24 - [0:0] +:logaccept-25 - [0:0] +:logaccept-26 - [0:0] +:logaccept-27 - [0:0] +:logaccept-28 - [0:0] +:logaccept-29 - [0:0] +:logaccept-3 - [0:0] +:logaccept-30 - [0:0] +:logaccept-31 - [0:0] +:logaccept-32 - [0:0] +:logaccept-33 - [0:0] +:logaccept-34 - [0:0] +:logaccept-35 - [0:0] +:logaccept-36 - [0:0] +:logaccept-37 - [0:0] +:logaccept-38 - [0:0] +:logaccept-39 - [0:0] +:logaccept-4 - [0:0] +:logaccept-40 - [0:0] +:logaccept-41 - [0:0] +:logaccept-42 - [0:0] +:logaccept-43 - [0:0] +:logaccept-44 - [0:0] +:logaccept-45 - [0:0] +:logaccept-46 - [0:0] +:logaccept-47 - [0:0] +:logaccept-48 - [0:0] +:logaccept-49 - [0:0] +:logaccept-5 - [0:0] +:logaccept-50 - [0:0] +:logaccept-51 - [0:0] +:logaccept-52 - [0:0] +:logaccept-53 - [0:0] +:logaccept-54 - [0:0] +:logaccept-55 - [0:0] +:logaccept-56 - [0:0] +:logaccept-57 - [0:0] +:logaccept-58 - [0:0] +:logaccept-59 - [0:0] +:logaccept-6 - [0:0] +:logaccept-60 - [0:0] +:logaccept-61 - [0:0] +:logaccept-62 - [0:0] +:logaccept-63 - [0:0] +:logaccept-7 - [0:0] +:logaccept-8 - [0:0] +:logaccept-9 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logpass-0 - [0:0] +:logpass-1 - [0:0] +:logpass-10 - [0:0] +:logpass-11 - [0:0] +:logpass-12 - [0:0] +:logpass-13 - [0:0] +:logpass-14 - [0:0] +:logpass-15 - [0:0] +:logpass-16 - [0:0] +:logpass-17 - [0:0] +:logpass-18 - [0:0] +:logpass-19 - [0:0] +:logpass-2 - [0:0] +:logpass-20 - [0:0] +:logpass-21 - [0:0] +:logpass-22 - [0:0] +:logpass-23 - [0:0] +:logpass-24 - [0:0] +:logpass-25 - [0:0] +:logpass-26 - [0:0] +:logpass-27 - [0:0] +:logpass-28 - [0:0] +:logpass-29 - [0:0] +:logpass-3 - [0:0] +:logpass-30 - [0:0] +:logpass-31 - [0:0] +:logpass-32 - [0:0] +:logpass-33 - [0:0] +:logpass-34 - [0:0] +:logpass-35 - [0:0] +:logpass-36 - [0:0] +:logpass-37 - [0:0] +:logpass-38 - [0:0] +:logpass-39 - [0:0] +:logpass-4 - [0:0] +:logpass-40 - [0:0] +:logpass-41 - [0:0] +:logpass-42 - [0:0] +:logpass-43 - [0:0] +:logpass-44 - [0:0] +:logpass-45 - [0:0] +:logpass-46 - [0:0] +:logpass-47 - [0:0] +:logpass-48 - [0:0] +:logpass-49 - [0:0] +:logpass-5 - [0:0] +:logpass-50 - [0:0] +:logpass-6 - [0:0] +:logpass-7 - [0:0] +:logpass-8 - [0:0] +:logpass-9 - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logpass-0 +-A FORWARD -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -d 172.16.0.0/16 +-A FORWARD -d 172.16.0.0/16 -j logaccept-1 +-A FORWARD -d 172.16.0.0/16 -j logpass-1 +-A FORWARD -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -d 172.16.0.0/16 +-A FORWARD -d 172.16.2.0/16 +-A FORWARD -d 172.16.0.0/16 -j logaccept-2 +-A FORWARD -d 172.16.2.0/16 -j logaccept-2 +-A FORWARD -d 172.16.0.0/16 -j logpass-2 +-A FORWARD -d 172.16.2.0/16 -j logpass-2 +-A FORWARD -s 10.0.0.1 -j ACCEPT +-A FORWARD -s 10.0.0.1 +-A FORWARD -s 10.0.0.1 -j logaccept-3 +-A FORWARD -s 10.0.0.1 -j logpass-3 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 +-A FORWARD -s 10.0.0.1 -j ACCEPT +-A FORWARD -s 10.0.0.2 -j ACCEPT +-A FORWARD -s 10.0.0.1 +-A FORWARD -s 10.0.0.2 +-A FORWARD -s 10.0.0.1 -j logaccept-6 +-A FORWARD -s 10.0.0.2 -j logaccept-6 +-A FORWARD -s 10.0.0.1 -j logpass-6 +-A FORWARD -s 10.0.0.2 -j logpass-6 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j logaccept-9 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j logpass-9 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-0 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-2 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-3 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-4 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-5 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-6 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-7 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-8 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-9 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-10 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-11 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-13 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-14 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-16 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-17 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-18 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-19 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-20 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-21 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-22 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-23 +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth0 +-A FORWARD -i eth0 -j logaccept-18 +-A FORWARD -i eth0 -j logpass-16 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -d 172.16.0.0/16 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-19 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-17 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -d 172.16.0.0/16 +-A FORWARD -i eth0 -d 172.16.2.0/16 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-20 +-A FORWARD -i eth0 -d 172.16.2.0/16 -j logaccept-20 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-18 +-A FORWARD -i eth0 -d 172.16.2.0/16 -j logpass-18 +-A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 +-A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-21 +-A FORWARD -i eth0 -s 10.0.0.1 -j logpass-19 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 +-A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 +-A FORWARD -i eth0 -s 10.0.0.2 +-A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-24 +-A FORWARD -i eth0 -s 10.0.0.2 -j logaccept-24 +-A FORWARD -i eth0 -s 10.0.0.1 -j logpass-22 +-A FORWARD -i eth0 -s 10.0.0.2 -j logpass-22 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j logaccept-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-24 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-25 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-26 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-28 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-29 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-30 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-31 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-30 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-32 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-33 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-34 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-35 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-36 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-37 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-38 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-39 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-33 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-33 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-40 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-41 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-42 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-43 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-44 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-45 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-46 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-47 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-36 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-30 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-48 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-49 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-50 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-51 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-52 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-53 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-54 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-55 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-56 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-57 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-58 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-59 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-60 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-61 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-62 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-63 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-64 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-65 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-66 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-67 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-68 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-69 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-70 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-71 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 +-A FORWARD -i eth2 -s 10.1.0.0/12 +-A FORWARD -i eth3 -s 10.1.0.0/12 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-45 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j logaccept-45 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j logaccept-45 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-37 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j logpass-37 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j logpass-37 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-72 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-72 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-72 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-73 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-73 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-73 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-74 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-74 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-74 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-75 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-75 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-75 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-76 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-76 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-76 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-77 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-77 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-77 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-78 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-78 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-78 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-79 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-79 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-79 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-80 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-80 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-80 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-81 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-81 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-81 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-82 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-82 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-82 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-83 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-83 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-83 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-84 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-84 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-84 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-85 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-85 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-85 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-86 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-86 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-86 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-87 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-87 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-87 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-88 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-88 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-88 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-89 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-89 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-89 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-90 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-90 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-90 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-91 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-91 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-91 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-92 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-92 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-92 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-93 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-93 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-93 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-94 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-94 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-94 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-95 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-95 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-95 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-63 +-A FORWARD -j logdrop-1 +-A FORWARD -j logpass-50 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmp -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logpass-0 +-A INPUT -d 172.16.0.0/16 -j ACCEPT +-A INPUT -d 172.16.0.0/16 +-A INPUT -d 172.16.0.0/16 -j logaccept-1 +-A INPUT -d 172.16.0.0/16 -j logpass-1 +-A INPUT -d 172.16.0.0/16 -j ACCEPT +-A INPUT -d 172.16.2.0/16 -j ACCEPT +-A INPUT -d 172.16.0.0/16 +-A INPUT -d 172.16.2.0/16 +-A INPUT -d 172.16.0.0/16 -j logaccept-2 +-A INPUT -d 172.16.2.0/16 -j logaccept-2 +-A INPUT -d 172.16.0.0/16 -j logpass-2 +-A INPUT -d 172.16.2.0/16 -j logpass-2 +-A INPUT -s 10.0.0.1 -j ACCEPT +-A INPUT -s 10.0.0.1 +-A INPUT -s 10.0.0.1 -j logaccept-3 +-A INPUT -s 10.0.0.1 -j logpass-3 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 +-A INPUT -s 10.0.0.1 -j ACCEPT +-A INPUT -s 10.0.0.2 -j ACCEPT +-A INPUT -s 10.0.0.1 +-A INPUT -s 10.0.0.2 +-A INPUT -s 10.0.0.1 -j logaccept-6 +-A INPUT -s 10.0.0.2 -j logaccept-6 +-A INPUT -s 10.0.0.1 -j logpass-6 +-A INPUT -s 10.0.0.2 -j logpass-6 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 +-A INPUT -i eth0 -j ACCEPT +-A INPUT -i eth0 +-A INPUT -i eth0 -j logaccept-18 +-A INPUT -i eth0 -j logpass-16 +-A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -d 172.16.0.0/16 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-19 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logpass-17 +-A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -d 172.16.0.0/16 +-A INPUT -i eth0 -d 172.16.2.0/16 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-20 +-A INPUT -i eth0 -d 172.16.2.0/16 -j logaccept-20 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logpass-18 +-A INPUT -i eth0 -d 172.16.2.0/16 -j logpass-18 +-A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 +-A INPUT -i eth0 -s 10.0.0.1 -j logaccept-21 +-A INPUT -i eth0 -s 10.0.0.1 -j logpass-19 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 +-A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 +-A INPUT -i eth0 -s 10.0.0.2 +-A INPUT -i eth0 -s 10.0.0.1 -j logaccept-24 +-A INPUT -i eth0 -s 10.0.0.2 -j logaccept-24 +-A INPUT -i eth0 -s 10.0.0.1 -j logpass-22 +-A INPUT -i eth0 -s 10.0.0.2 -j logpass-22 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 +-A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-36 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logpass-30 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-48 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-49 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-50 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-51 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-52 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-53 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-54 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-55 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-56 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-57 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-58 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-59 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-60 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-61 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-62 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-63 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-64 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-65 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-66 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-67 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-68 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-69 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-70 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-71 +-A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 +-A INPUT -i eth2 -s 10.1.0.0/12 +-A INPUT -i eth3 -s 10.1.0.0/12 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-45 +-A INPUT -i eth2 -s 10.1.0.0/12 -j logaccept-45 +-A INPUT -i eth3 -s 10.1.0.0/12 -j logaccept-45 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logpass-37 +-A INPUT -i eth2 -s 10.1.0.0/12 -j logpass-37 +-A INPUT -i eth3 -s 10.1.0.0/12 -j logpass-37 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-72 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-72 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-72 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-73 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-73 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-73 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-74 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-74 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-74 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-75 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-75 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-75 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-76 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-76 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-76 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-77 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-77 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-77 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-78 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-78 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-78 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-79 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-79 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-79 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-80 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-80 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-80 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-81 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-81 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-81 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-82 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-82 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-82 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-83 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-83 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-83 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-84 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-84 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-84 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-85 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-85 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-85 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-86 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-86 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-86 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-87 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-87 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-87 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-88 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-88 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-88 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-89 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-89 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-89 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-90 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-90 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-90 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-91 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-91 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-91 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-92 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-92 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-92 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-93 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-93 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-93 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-94 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-94 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-94 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-95 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-95 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-95 +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-63 +-A INPUT -j logdrop-1 +-A INPUT -j logpass-50 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmp -j icmp-routing +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logpass-0 +-A OUTPUT -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -d 172.16.0.0/16 +-A OUTPUT -d 172.16.0.0/16 -j logaccept-1 +-A OUTPUT -d 172.16.0.0/16 -j logpass-1 +-A OUTPUT -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -d 172.16.0.0/16 +-A OUTPUT -d 172.16.2.0/16 +-A OUTPUT -d 172.16.0.0/16 -j logaccept-2 +-A OUTPUT -d 172.16.2.0/16 -j logaccept-2 +-A OUTPUT -d 172.16.0.0/16 -j logpass-2 +-A OUTPUT -d 172.16.2.0/16 -j logpass-2 +-A OUTPUT -s 10.0.0.1 -j ACCEPT +-A OUTPUT -s 10.0.0.1 +-A OUTPUT -s 10.0.0.1 -j logaccept-3 +-A OUTPUT -s 10.0.0.1 -j logpass-3 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 +-A OUTPUT -s 10.0.0.1 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -j ACCEPT +-A OUTPUT -s 10.0.0.1 +-A OUTPUT -s 10.0.0.2 +-A OUTPUT -s 10.0.0.1 -j logaccept-6 +-A OUTPUT -s 10.0.0.2 -j logaccept-6 +-A OUTPUT -s 10.0.0.1 -j logpass-6 +-A OUTPUT -s 10.0.0.2 -j logpass-6 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j logaccept-9 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j logpass-9 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-0 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-2 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-3 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-4 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-5 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-6 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-7 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-8 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-9 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-10 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-11 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-13 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-14 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-16 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-17 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-18 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-19 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-20 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-21 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-22 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-23 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-63 +-A OUTPUT -j logdrop-1 +-A OUTPUT -j logpass-50 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -p icmp -j icmp-routing +-A address-0 -d 172.16.0.0/16 -j ACCEPT +-A address-1 -d 172.16.0.0/16 +-A address-10 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-13 +-A address-100 -d 172.16.0.0/16 -j ACCEPT +-A address-100 -d 172.16.2.0/16 -j ACCEPT +-A address-101 -d 172.16.0.0/16 +-A address-101 -d 172.16.2.0/16 +-A address-102 -d 172.16.0.0/16 -j logaccept-56 +-A address-102 -d 172.16.2.0/16 -j logaccept-56 +-A address-103 -d 172.16.0.0/16 -j logpass-45 +-A address-103 -d 172.16.2.0/16 -j logpass-45 +-A address-104 -s 10.0.0.1 -j ACCEPT +-A address-105 -s 10.0.0.1 +-A address-106 -s 10.0.0.1 -j logaccept-57 +-A address-107 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A address-108 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-109 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-11 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-110 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-58 +-A address-111 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-112 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-112 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-113 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-113 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-114 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-59 +-A address-114 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-59 +-A address-115 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-46 +-A address-115 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-46 +-A address-116 -s 10.0.0.1 -j ACCEPT +-A address-116 -s 10.0.0.2 -j ACCEPT +-A address-117 -s 10.0.0.1 +-A address-117 -s 10.0.0.2 +-A address-118 -s 10.0.0.1 -j logaccept-60 +-A address-118 -s 10.0.0.2 -j logaccept-60 +-A address-119 -s 10.0.0.1 -j logpass-47 +-A address-119 -s 10.0.0.2 -j logpass-47 +-A address-12 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-12 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-120 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-120 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-121 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-121 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-122 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-61 +-A address-122 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-61 +-A address-123 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-48 +-A address-123 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-48 +-A address-124 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-124 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-124 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-124 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-125 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-125 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-125 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-125 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-126 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-62 +-A address-126 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-62 +-A address-126 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-62 +-A address-126 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-62 +-A address-127 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-49 +-A address-127 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-49 +-A address-127 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-49 +-A address-127 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-49 +-A address-13 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-13 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-14 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-14 +-A address-14 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-14 +-A address-15 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-12 +-A address-15 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-12 +-A address-16 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-16 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-17 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-17 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-18 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-16 +-A address-18 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-16 +-A address-19 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-14 +-A address-19 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-14 +-A address-2 -d 172.16.0.0/16 -j logaccept-10 +-A address-20 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-20 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-20 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-20 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-21 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-21 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-21 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-21 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-22 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-17 +-A address-22 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-17 +-A address-22 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-17 +-A address-22 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-17 +-A address-23 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-15 +-A address-23 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-15 +-A address-23 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-15 +-A address-23 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-15 +-A address-24 -d 172.16.0.0/16 -j ACCEPT +-A address-25 -d 172.16.0.0/16 +-A address-26 -d 172.16.0.0/16 -j logaccept-28 +-A address-27 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-28 -d 172.16.0.0/16 -j ACCEPT +-A address-28 -d 172.16.2.0/16 -j ACCEPT +-A address-29 -d 172.16.0.0/16 +-A address-29 -d 172.16.2.0/16 +-A address-3 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-30 -d 172.16.0.0/16 -j logaccept-29 +-A address-30 -d 172.16.2.0/16 -j logaccept-29 +-A address-31 -d 172.16.0.0/16 -j logpass-25 +-A address-31 -d 172.16.2.0/16 -j logpass-25 +-A address-32 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-33 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-34 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-31 +-A address-35 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-36 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-36 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-37 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-37 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-38 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-32 +-A address-38 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-32 +-A address-39 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-26 +-A address-39 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-26 +-A address-4 -d 172.16.0.0/16 -j ACCEPT +-A address-4 -d 172.16.2.0/16 -j ACCEPT +-A address-40 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-40 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-41 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-41 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-42 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-34 +-A address-42 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-34 +-A address-43 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-28 +-A address-43 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-28 +-A address-44 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-44 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-44 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-44 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-45 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-45 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-45 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-45 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-46 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-35 +-A address-46 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-35 +-A address-46 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-35 +-A address-46 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-35 +-A address-47 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-29 +-A address-47 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-29 +-A address-47 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-29 +-A address-47 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-29 +-A address-48 -s 10.0.0.1 -j ACCEPT +-A address-49 -s 10.0.0.1 +-A address-5 -d 172.16.0.0/16 +-A address-5 -d 172.16.2.0/16 +-A address-50 -s 10.0.0.1 -j logaccept-39 +-A address-51 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A address-52 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-53 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-54 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-40 +-A address-55 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-56 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-56 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-57 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-57 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-58 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-41 +-A address-58 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-41 +-A address-59 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-33 +-A address-59 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-33 +-A address-6 -d 172.16.0.0/16 -j logaccept-11 +-A address-6 -d 172.16.2.0/16 -j logaccept-11 +-A address-60 -s 10.0.0.1 -j ACCEPT +-A address-60 -s 10.0.0.2 -j ACCEPT +-A address-61 -s 10.0.0.1 +-A address-61 -s 10.0.0.2 +-A address-62 -s 10.0.0.1 -j logaccept-42 +-A address-62 -s 10.0.0.2 -j logaccept-42 +-A address-63 -s 10.0.0.1 -j logpass-34 +-A address-63 -s 10.0.0.2 -j logpass-34 +-A address-64 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-64 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-65 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-65 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-66 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-43 +-A address-66 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-43 +-A address-67 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-35 +-A address-67 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-35 +-A address-68 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-68 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-68 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-68 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-69 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-69 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-69 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-69 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-7 -d 172.16.0.0/16 -j logpass-10 +-A address-7 -d 172.16.2.0/16 -j logpass-10 +-A address-70 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-44 +-A address-70 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-44 +-A address-70 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-44 +-A address-70 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-44 +-A address-71 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-36 +-A address-71 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-36 +-A address-71 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-36 +-A address-71 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-36 +-A address-72 -s 10.0.0.1 -j ACCEPT +-A address-73 -s 10.0.0.1 +-A address-74 -s 10.0.0.1 -j logaccept-48 +-A address-75 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A address-76 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-77 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-78 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-49 +-A address-79 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-8 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-80 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-80 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-81 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-81 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-82 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-50 +-A address-82 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-50 +-A address-83 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-40 +-A address-83 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-40 +-A address-84 -s 10.0.0.1 -j ACCEPT +-A address-84 -s 10.0.0.2 -j ACCEPT +-A address-85 -s 10.0.0.1 +-A address-85 -s 10.0.0.2 +-A address-86 -s 10.0.0.1 -j logaccept-51 +-A address-86 -s 10.0.0.2 -j logaccept-51 +-A address-87 -s 10.0.0.1 -j logpass-41 +-A address-87 -s 10.0.0.2 -j logpass-41 +-A address-88 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-88 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-89 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-89 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-9 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-90 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-52 +-A address-90 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-52 +-A address-91 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-42 +-A address-91 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-42 +-A address-92 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-92 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-92 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-92 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-93 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-93 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-93 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-93 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-94 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-53 +-A address-94 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-53 +-A address-94 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-53 +-A address-94 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-53 +-A address-95 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-43 +-A address-95 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-43 +-A address-95 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-43 +-A address-95 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-43 +-A address-96 -d 172.16.0.0/16 -j ACCEPT +-A address-97 -d 172.16.0.0/16 +-A address-98 -d 172.16.0.0/16 -j logaccept-55 +-A address-99 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A icmp-routing -p icmp --icmp-type 3 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 11 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 12 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logaccept-1 -m limit --limit 1/second -j LOG +-A logaccept-1 -j ACCEPT +-A logaccept-10 -m limit --limit 1/second -j LOG +-A logaccept-10 -j ACCEPT +-A logaccept-11 -m limit --limit 1/second -j LOG +-A logaccept-11 -j ACCEPT +-A logaccept-12 -m limit --limit 1/second -j LOG +-A logaccept-12 -j ACCEPT +-A logaccept-13 -m limit --limit 1/second -j LOG +-A logaccept-13 -j ACCEPT +-A logaccept-14 -m limit --limit 1/second -j LOG +-A logaccept-14 -j ACCEPT +-A logaccept-15 -m limit --limit 1/second -j LOG +-A logaccept-15 -j ACCEPT +-A logaccept-16 -m limit --limit 1/second -j LOG +-A logaccept-16 -j ACCEPT +-A logaccept-17 -m limit --limit 1/second -j LOG +-A logaccept-17 -j ACCEPT +-A logaccept-18 -m limit --limit 1/second -j LOG +-A logaccept-18 -j ACCEPT +-A logaccept-19 -m limit --limit 1/second -j LOG +-A logaccept-19 -j ACCEPT +-A logaccept-2 -m limit --limit 1/second -j LOG +-A logaccept-2 -j ACCEPT +-A logaccept-20 -m limit --limit 1/second -j LOG +-A logaccept-20 -j ACCEPT +-A logaccept-21 -m limit --limit 1/second -j LOG +-A logaccept-21 -j ACCEPT +-A logaccept-22 -m limit --limit 1/second -j LOG +-A logaccept-22 -j ACCEPT +-A logaccept-23 -m limit --limit 1/second -j LOG +-A logaccept-23 -j ACCEPT +-A logaccept-24 -m limit --limit 1/second -j LOG +-A logaccept-24 -j ACCEPT +-A logaccept-25 -m limit --limit 1/second -j LOG +-A logaccept-25 -j ACCEPT +-A logaccept-26 -m limit --limit 1/second -j LOG +-A logaccept-26 -j ACCEPT +-A logaccept-27 -m limit --limit 1/second -j LOG +-A logaccept-27 -j ACCEPT +-A logaccept-28 -m limit --limit 1/second -j LOG +-A logaccept-28 -j ACCEPT +-A logaccept-29 -m limit --limit 1/second -j LOG +-A logaccept-29 -j ACCEPT +-A logaccept-3 -m limit --limit 1/second -j LOG +-A logaccept-3 -j ACCEPT +-A logaccept-30 -m limit --limit 1/second -j LOG +-A logaccept-30 -j ACCEPT +-A logaccept-31 -m limit --limit 1/second -j LOG +-A logaccept-31 -j ACCEPT +-A logaccept-32 -m limit --limit 1/second -j LOG +-A logaccept-32 -j ACCEPT +-A logaccept-33 -m limit --limit 1/second -j LOG +-A logaccept-33 -j ACCEPT +-A logaccept-34 -m limit --limit 1/second -j LOG +-A logaccept-34 -j ACCEPT +-A logaccept-35 -m limit --limit 1/second -j LOG +-A logaccept-35 -j ACCEPT +-A logaccept-36 -m limit --limit 1/second -j LOG +-A logaccept-36 -j ACCEPT +-A logaccept-37 -m limit --limit 1/second -j LOG +-A logaccept-37 -j ACCEPT +-A logaccept-38 -m limit --limit 1/second -j LOG +-A logaccept-38 -j ACCEPT +-A logaccept-39 -m limit --limit 1/second -j LOG +-A logaccept-39 -j ACCEPT +-A logaccept-4 -m limit --limit 1/second -j LOG +-A logaccept-4 -j ACCEPT +-A logaccept-40 -m limit --limit 1/second -j LOG +-A logaccept-40 -j ACCEPT +-A logaccept-41 -m limit --limit 1/second -j LOG +-A logaccept-41 -j ACCEPT +-A logaccept-42 -m limit --limit 1/second -j LOG +-A logaccept-42 -j ACCEPT +-A logaccept-43 -m limit --limit 1/second -j LOG +-A logaccept-43 -j ACCEPT +-A logaccept-44 -m limit --limit 1/second -j LOG +-A logaccept-44 -j ACCEPT +-A logaccept-45 -m limit --limit 1/second -j LOG +-A logaccept-45 -j ACCEPT +-A logaccept-46 -m limit --limit 1/second -j LOG +-A logaccept-46 -j ACCEPT +-A logaccept-47 -m limit --limit 1/second -j LOG +-A logaccept-47 -j ACCEPT +-A logaccept-48 -m limit --limit 1/second -j LOG +-A logaccept-48 -j ACCEPT +-A logaccept-49 -m limit --limit 1/second -j LOG +-A logaccept-49 -j ACCEPT +-A logaccept-5 -m limit --limit 1/second -j LOG +-A logaccept-5 -j ACCEPT +-A logaccept-50 -m limit --limit 1/second -j LOG +-A logaccept-50 -j ACCEPT +-A logaccept-51 -m limit --limit 1/second -j LOG +-A logaccept-51 -j ACCEPT +-A logaccept-52 -m limit --limit 1/second -j LOG +-A logaccept-52 -j ACCEPT +-A logaccept-53 -m limit --limit 1/second -j LOG +-A logaccept-53 -j ACCEPT +-A logaccept-54 -m limit --limit 1/second -j LOG +-A logaccept-54 -j ACCEPT +-A logaccept-55 -m limit --limit 1/second -j LOG +-A logaccept-55 -j ACCEPT +-A logaccept-56 -m limit --limit 1/second -j LOG +-A logaccept-56 -j ACCEPT +-A logaccept-57 -m limit --limit 1/second -j LOG +-A logaccept-57 -j ACCEPT +-A logaccept-58 -m limit --limit 1/second -j LOG +-A logaccept-58 -j ACCEPT +-A logaccept-59 -m limit --limit 1/second -j LOG +-A logaccept-59 -j ACCEPT +-A logaccept-6 -m limit --limit 1/second -j LOG +-A logaccept-6 -j ACCEPT +-A logaccept-60 -m limit --limit 1/second -j LOG +-A logaccept-60 -j ACCEPT +-A logaccept-61 -m limit --limit 1/second -j LOG +-A logaccept-61 -j ACCEPT +-A logaccept-62 -m limit --limit 1/second -j LOG +-A logaccept-62 -j ACCEPT +-A logaccept-63 -m limit --limit 1/second -j LOG +-A logaccept-63 -j ACCEPT +-A logaccept-7 -m limit --limit 1/second -j LOG +-A logaccept-7 -j ACCEPT +-A logaccept-8 -m limit --limit 1/second -j LOG +-A logaccept-8 -j ACCEPT +-A logaccept-9 -m limit --limit 1/second -j LOG +-A logaccept-9 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-1 -m limit --limit 1/second -j LOG +-A logpass-10 -m limit --limit 1/second -j LOG +-A logpass-11 -m limit --limit 1/second -j LOG +-A logpass-12 -m limit --limit 1/second -j LOG +-A logpass-13 -m limit --limit 1/second -j LOG +-A logpass-14 -m limit --limit 1/second -j LOG +-A logpass-15 -m limit --limit 1/second -j LOG +-A logpass-16 -m limit --limit 1/second -j LOG +-A logpass-17 -m limit --limit 1/second -j LOG +-A logpass-18 -m limit --limit 1/second -j LOG +-A logpass-19 -m limit --limit 1/second -j LOG +-A logpass-2 -m limit --limit 1/second -j LOG +-A logpass-20 -m limit --limit 1/second -j LOG +-A logpass-21 -m limit --limit 1/second -j LOG +-A logpass-22 -m limit --limit 1/second -j LOG +-A logpass-23 -m limit --limit 1/second -j LOG +-A logpass-24 -m limit --limit 1/second -j LOG +-A logpass-25 -m limit --limit 1/second -j LOG +-A logpass-26 -m limit --limit 1/second -j LOG +-A logpass-27 -m limit --limit 1/second -j LOG +-A logpass-28 -m limit --limit 1/second -j LOG +-A logpass-29 -m limit --limit 1/second -j LOG +-A logpass-3 -m limit --limit 1/second -j LOG +-A logpass-30 -m limit --limit 1/second -j LOG +-A logpass-31 -m limit --limit 1/second -j LOG +-A logpass-32 -m limit --limit 1/second -j LOG +-A logpass-33 -m limit --limit 1/second -j LOG +-A logpass-34 -m limit --limit 1/second -j LOG +-A logpass-35 -m limit --limit 1/second -j LOG +-A logpass-36 -m limit --limit 1/second -j LOG +-A logpass-37 -m limit --limit 1/second -j LOG +-A logpass-38 -m limit --limit 1/second -j LOG +-A logpass-39 -m limit --limit 1/second -j LOG +-A logpass-4 -m limit --limit 1/second -j LOG +-A logpass-40 -m limit --limit 1/second -j LOG +-A logpass-41 -m limit --limit 1/second -j LOG +-A logpass-42 -m limit --limit 1/second -j LOG +-A logpass-43 -m limit --limit 1/second -j LOG +-A logpass-44 -m limit --limit 1/second -j LOG +-A logpass-45 -m limit --limit 1/second -j LOG +-A logpass-46 -m limit --limit 1/second -j LOG +-A logpass-47 -m limit --limit 1/second -j LOG +-A logpass-48 -m limit --limit 1/second -j LOG +-A logpass-49 -m limit --limit 1/second -j LOG +-A logpass-5 -m limit --limit 1/second -j LOG +-A logpass-50 -m limit --limit 1/second -j LOG +-A logpass-6 -m limit --limit 1/second -j LOG +-A logpass-7 -m limit --limit 1/second -j LOG +-A logpass-8 -m limit --limit 1/second -j LOG +-A logpass-9 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:FORWARD ACCEPT [0:0] +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*nat +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +:awall-masquerade - [0:0] +-A INPUT -j MASQUERADE +-A OUTPUT -j REDIRECT +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE +-A POSTROUTING -m set --match-set awall-masquerade src -j awall-masquerade +-A PREROUTING -i eth0 -j REDIRECT +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT +-A awall-masquerade -m set ! --match-set awall-masquerade dst -j MASQUERADE +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT + +# rules6-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logaccept-18 - [0:0] +:logaccept-27 - [0:0] +:logaccept-36 - [0:0] +:logaccept-45 - [0:0] +:logaccept-63 - [0:0] +:logaccept-9 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logpass-0 - [0:0] +:logpass-16 - [0:0] +:logpass-30 - [0:0] +:logpass-37 - [0:0] +:logpass-50 - [0:0] +:logpass-9 - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logpass-0 +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 +-A FORWARD -o eth1 -d fc00::/7 -j logaccept-9 +-A FORWARD -o eth1 -d fc00::/7 -j logpass-9 +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth0 +-A FORWARD -i eth0 -j logaccept-18 +-A FORWARD -i eth0 -j logpass-16 +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j logaccept-27 +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG +-A FORWARD -i eth1 -s fc00::/7 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 +-A FORWARD -i eth1 -s fc00::/7 -j logaccept-36 +-A FORWARD -i eth1 -s fc00::/7 -j logpass-30 +-A FORWARD -i eth1 -s fc00::/7 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 +-A FORWARD -i eth1 -s fc00::/7 -j logaccept-45 +-A FORWARD -i eth1 -s fc00::/7 -j logpass-37 +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-63 +-A FORWARD -j logdrop-1 +-A FORWARD -j logpass-50 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logpass-0 +-A INPUT -i eth0 -j ACCEPT +-A INPUT -i eth0 +-A INPUT -i eth0 -j logaccept-18 +-A INPUT -i eth0 -j logpass-16 +-A INPUT -i eth1 -s fc00::/7 -j ACCEPT +-A INPUT -i eth1 -s fc00::/7 +-A INPUT -i eth1 -s fc00::/7 -j logaccept-36 +-A INPUT -i eth1 -s fc00::/7 -j logpass-30 +-A INPUT -i eth1 -s fc00::/7 -j ACCEPT +-A INPUT -i eth1 -s fc00::/7 +-A INPUT -i eth1 -s fc00::/7 -j logaccept-45 +-A INPUT -i eth1 -s fc00::/7 -j logpass-37 +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-63 +-A INPUT -j logdrop-1 +-A INPUT -j logpass-50 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmpv6 -j ACCEPT +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logpass-0 +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 +-A OUTPUT -o eth1 -d fc00::/7 -j logaccept-9 +-A OUTPUT -o eth1 -d fc00::/7 -j logpass-9 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-63 +-A OUTPUT -j logdrop-1 +-A OUTPUT -j logpass-50 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -p icmpv6 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logaccept-18 -m limit --limit 1/second -j LOG +-A logaccept-18 -j ACCEPT +-A logaccept-27 -m limit --limit 1/second -j LOG +-A logaccept-27 -j ACCEPT +-A logaccept-36 -m limit --limit 1/second -j LOG +-A logaccept-36 -j ACCEPT +-A logaccept-45 -m limit --limit 1/second -j LOG +-A logaccept-45 -j ACCEPT +-A logaccept-63 -m limit --limit 1/second -j LOG +-A logaccept-63 -j ACCEPT +-A logaccept-9 -m limit --limit 1/second -j LOG +-A logaccept-9 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-16 -m limit --limit 1/second -j LOG +-A logpass-30 -m limit --limit 1/second -j LOG +-A logpass-37 -m limit --limit 1/second -j LOG +-A logpass-50 -m limit --limit 1/second -j LOG +-A logpass-9 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT + diff --git a/test/output/ipset-awall-masquerade b/test/output/address/ipset-awall-masquerade index b3a47fd..b3a47fd 100644 --- a/test/output/ipset-awall-masquerade +++ b/test/output/address/ipset-awall-masquerade diff --git a/test/output/address/rules-save b/test/output/address/rules-save new file mode 100644 index 0000000..c1e91b4 --- /dev/null +++ b/test/output/address/rules-save @@ -0,0 +1,1654 @@ +# rules-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:address-0 - [0:0] +:address-1 - [0:0] +:address-10 - [0:0] +:address-100 - [0:0] +:address-101 - [0:0] +:address-102 - [0:0] +:address-103 - [0:0] +:address-104 - [0:0] +:address-105 - [0:0] +:address-106 - [0:0] +:address-107 - [0:0] +:address-108 - [0:0] +:address-109 - [0:0] +:address-11 - [0:0] +:address-110 - [0:0] +:address-111 - [0:0] +:address-112 - [0:0] +:address-113 - [0:0] +:address-114 - [0:0] +:address-115 - [0:0] +:address-116 - [0:0] +:address-117 - [0:0] +:address-118 - [0:0] +:address-119 - [0:0] +:address-12 - [0:0] +:address-120 - [0:0] +:address-121 - [0:0] +:address-122 - [0:0] +:address-123 - [0:0] +:address-124 - [0:0] +:address-125 - [0:0] +:address-126 - [0:0] +:address-127 - [0:0] +:address-13 - [0:0] +:address-14 - [0:0] +:address-15 - [0:0] +:address-16 - [0:0] +:address-17 - [0:0] +:address-18 - [0:0] +:address-19 - [0:0] +:address-2 - [0:0] +:address-20 - [0:0] +:address-21 - [0:0] +:address-22 - [0:0] +:address-23 - [0:0] +:address-24 - [0:0] +:address-25 - [0:0] +:address-26 - [0:0] +:address-27 - [0:0] +:address-28 - [0:0] +:address-29 - [0:0] +:address-3 - [0:0] +:address-30 - [0:0] +:address-31 - [0:0] +:address-32 - [0:0] +:address-33 - [0:0] +:address-34 - [0:0] +:address-35 - [0:0] +:address-36 - [0:0] +:address-37 - [0:0] +:address-38 - [0:0] +:address-39 - [0:0] +:address-4 - [0:0] +:address-40 - [0:0] +:address-41 - [0:0] +:address-42 - [0:0] +:address-43 - [0:0] +:address-44 - [0:0] +:address-45 - [0:0] +:address-46 - [0:0] +:address-47 - [0:0] +:address-48 - [0:0] +:address-49 - [0:0] +:address-5 - [0:0] +:address-50 - [0:0] +:address-51 - [0:0] +:address-52 - [0:0] +:address-53 - [0:0] +:address-54 - [0:0] +:address-55 - [0:0] +:address-56 - [0:0] +:address-57 - [0:0] +:address-58 - [0:0] +:address-59 - [0:0] +:address-6 - [0:0] +:address-60 - [0:0] +:address-61 - [0:0] +:address-62 - [0:0] +:address-63 - [0:0] +:address-64 - [0:0] +:address-65 - [0:0] +:address-66 - [0:0] +:address-67 - [0:0] +:address-68 - [0:0] +:address-69 - [0:0] +:address-7 - [0:0] +:address-70 - [0:0] +:address-71 - [0:0] +:address-72 - [0:0] +:address-73 - [0:0] +:address-74 - [0:0] +:address-75 - [0:0] +:address-76 - [0:0] +:address-77 - [0:0] +:address-78 - [0:0] +:address-79 - [0:0] +:address-8 - [0:0] +:address-80 - [0:0] +:address-81 - [0:0] +:address-82 - [0:0] +:address-83 - [0:0] +:address-84 - [0:0] +:address-85 - [0:0] +:address-86 - [0:0] +:address-87 - [0:0] +:address-88 - [0:0] +:address-89 - [0:0] +:address-9 - [0:0] +:address-90 - [0:0] +:address-91 - [0:0] +:address-92 - [0:0] +:address-93 - [0:0] +:address-94 - [0:0] +:address-95 - [0:0] +:address-96 - [0:0] +:address-97 - [0:0] +:address-98 - [0:0] +:address-99 - [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logaccept-1 - [0:0] +:logaccept-10 - [0:0] +:logaccept-11 - [0:0] +:logaccept-12 - [0:0] +:logaccept-13 - [0:0] +:logaccept-14 - [0:0] +:logaccept-15 - [0:0] +:logaccept-16 - [0:0] +:logaccept-17 - [0:0] +:logaccept-18 - [0:0] +:logaccept-19 - [0:0] +:logaccept-2 - [0:0] +:logaccept-20 - [0:0] +:logaccept-21 - [0:0] +:logaccept-22 - [0:0] +:logaccept-23 - [0:0] +:logaccept-24 - [0:0] +:logaccept-25 - [0:0] +:logaccept-26 - [0:0] +:logaccept-27 - [0:0] +:logaccept-28 - [0:0] +:logaccept-29 - [0:0] +:logaccept-3 - [0:0] +:logaccept-30 - [0:0] +:logaccept-31 - [0:0] +:logaccept-32 - [0:0] +:logaccept-33 - [0:0] +:logaccept-34 - [0:0] +:logaccept-35 - [0:0] +:logaccept-36 - [0:0] +:logaccept-37 - [0:0] +:logaccept-38 - [0:0] +:logaccept-39 - [0:0] +:logaccept-4 - [0:0] +:logaccept-40 - [0:0] +:logaccept-41 - [0:0] +:logaccept-42 - [0:0] +:logaccept-43 - [0:0] +:logaccept-44 - [0:0] +:logaccept-45 - [0:0] +:logaccept-46 - [0:0] +:logaccept-47 - [0:0] +:logaccept-48 - [0:0] +:logaccept-49 - [0:0] +:logaccept-5 - [0:0] +:logaccept-50 - [0:0] +:logaccept-51 - [0:0] +:logaccept-52 - [0:0] +:logaccept-53 - [0:0] +:logaccept-54 - [0:0] +:logaccept-55 - [0:0] +:logaccept-56 - [0:0] +:logaccept-57 - [0:0] +:logaccept-58 - [0:0] +:logaccept-59 - [0:0] +:logaccept-6 - [0:0] +:logaccept-60 - [0:0] +:logaccept-61 - [0:0] +:logaccept-62 - [0:0] +:logaccept-63 - [0:0] +:logaccept-7 - [0:0] +:logaccept-8 - [0:0] +:logaccept-9 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logpass-0 - [0:0] +:logpass-1 - [0:0] +:logpass-10 - [0:0] +:logpass-11 - [0:0] +:logpass-12 - [0:0] +:logpass-13 - [0:0] +:logpass-14 - [0:0] +:logpass-15 - [0:0] +:logpass-16 - [0:0] +:logpass-17 - [0:0] +:logpass-18 - [0:0] +:logpass-19 - [0:0] +:logpass-2 - [0:0] +:logpass-20 - [0:0] +:logpass-21 - [0:0] +:logpass-22 - [0:0] +:logpass-23 - [0:0] +:logpass-24 - [0:0] +:logpass-25 - [0:0] +:logpass-26 - [0:0] +:logpass-27 - [0:0] +:logpass-28 - [0:0] +:logpass-29 - [0:0] +:logpass-3 - [0:0] +:logpass-30 - [0:0] +:logpass-31 - [0:0] +:logpass-32 - [0:0] +:logpass-33 - [0:0] +:logpass-34 - [0:0] +:logpass-35 - [0:0] +:logpass-36 - [0:0] +:logpass-37 - [0:0] +:logpass-38 - [0:0] +:logpass-39 - [0:0] +:logpass-4 - [0:0] +:logpass-40 - [0:0] +:logpass-41 - [0:0] +:logpass-42 - [0:0] +:logpass-43 - [0:0] +:logpass-44 - [0:0] +:logpass-45 - [0:0] +:logpass-46 - [0:0] +:logpass-47 - [0:0] +:logpass-48 - [0:0] +:logpass-49 - [0:0] +:logpass-5 - [0:0] +:logpass-50 - [0:0] +:logpass-6 - [0:0] +:logpass-7 - [0:0] +:logpass-8 - [0:0] +:logpass-9 - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logpass-0 +-A FORWARD -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -d 172.16.0.0/16 +-A FORWARD -d 172.16.0.0/16 -j logaccept-1 +-A FORWARD -d 172.16.0.0/16 -j logpass-1 +-A FORWARD -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -d 172.16.0.0/16 +-A FORWARD -d 172.16.2.0/16 +-A FORWARD -d 172.16.0.0/16 -j logaccept-2 +-A FORWARD -d 172.16.2.0/16 -j logaccept-2 +-A FORWARD -d 172.16.0.0/16 -j logpass-2 +-A FORWARD -d 172.16.2.0/16 -j logpass-2 +-A FORWARD -s 10.0.0.1 -j ACCEPT +-A FORWARD -s 10.0.0.1 +-A FORWARD -s 10.0.0.1 -j logaccept-3 +-A FORWARD -s 10.0.0.1 -j logpass-3 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 +-A FORWARD -s 10.0.0.1 -j ACCEPT +-A FORWARD -s 10.0.0.2 -j ACCEPT +-A FORWARD -s 10.0.0.1 +-A FORWARD -s 10.0.0.2 +-A FORWARD -s 10.0.0.1 -j logaccept-6 +-A FORWARD -s 10.0.0.2 -j logaccept-6 +-A FORWARD -s 10.0.0.1 -j logpass-6 +-A FORWARD -s 10.0.0.2 -j logpass-6 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j logaccept-9 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j logpass-9 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-0 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-2 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-3 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-4 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-5 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-6 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-7 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-8 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-9 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-10 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-11 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-13 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-14 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-16 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-17 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-18 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-19 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-20 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-21 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-22 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-23 +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth0 +-A FORWARD -i eth0 -j logaccept-18 +-A FORWARD -i eth0 -j logpass-16 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -d 172.16.0.0/16 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-19 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-17 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -d 172.16.0.0/16 +-A FORWARD -i eth0 -d 172.16.2.0/16 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-20 +-A FORWARD -i eth0 -d 172.16.2.0/16 -j logaccept-20 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-18 +-A FORWARD -i eth0 -d 172.16.2.0/16 -j logpass-18 +-A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 +-A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-21 +-A FORWARD -i eth0 -s 10.0.0.1 -j logpass-19 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 +-A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 +-A FORWARD -i eth0 -s 10.0.0.2 +-A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-24 +-A FORWARD -i eth0 -s 10.0.0.2 -j logaccept-24 +-A FORWARD -i eth0 -s 10.0.0.1 -j logpass-22 +-A FORWARD -i eth0 -s 10.0.0.2 -j logpass-22 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j logaccept-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-24 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-25 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-26 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-28 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-29 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-30 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-31 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-30 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-32 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-33 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-34 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-35 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-36 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-37 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-38 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-39 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-33 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-33 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-40 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-41 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-42 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-43 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-44 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-45 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-46 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-47 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-36 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-30 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-48 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-49 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-50 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-51 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-52 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-53 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-54 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-55 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-56 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-57 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-58 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-59 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-60 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-61 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-62 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-63 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-64 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-65 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-66 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-67 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-68 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-69 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-70 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-71 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 +-A FORWARD -i eth2 -s 10.1.0.0/12 +-A FORWARD -i eth3 -s 10.1.0.0/12 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-45 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j logaccept-45 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j logaccept-45 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-37 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j logpass-37 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j logpass-37 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-72 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-72 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-72 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-73 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-73 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-73 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-74 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-74 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-74 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-75 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-75 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-75 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-76 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-76 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-76 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-77 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-77 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-77 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-78 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-78 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-78 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-79 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-79 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-79 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-80 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-80 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-80 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-81 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-81 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-81 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-82 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-82 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-82 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-83 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-83 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-83 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-84 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-84 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-84 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-85 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-85 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-85 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-86 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-86 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-86 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-87 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-87 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-87 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-88 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-88 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-88 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-89 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-89 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-89 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-90 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-90 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-90 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-91 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-91 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-91 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-92 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-92 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-92 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-93 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-93 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-93 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-94 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-94 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-94 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-95 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-95 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-95 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-63 +-A FORWARD -j logdrop-1 +-A FORWARD -j logpass-50 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmp -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logpass-0 +-A INPUT -d 172.16.0.0/16 -j ACCEPT +-A INPUT -d 172.16.0.0/16 +-A INPUT -d 172.16.0.0/16 -j logaccept-1 +-A INPUT -d 172.16.0.0/16 -j logpass-1 +-A INPUT -d 172.16.0.0/16 -j ACCEPT +-A INPUT -d 172.16.2.0/16 -j ACCEPT +-A INPUT -d 172.16.0.0/16 +-A INPUT -d 172.16.2.0/16 +-A INPUT -d 172.16.0.0/16 -j logaccept-2 +-A INPUT -d 172.16.2.0/16 -j logaccept-2 +-A INPUT -d 172.16.0.0/16 -j logpass-2 +-A INPUT -d 172.16.2.0/16 -j logpass-2 +-A INPUT -s 10.0.0.1 -j ACCEPT +-A INPUT -s 10.0.0.1 +-A INPUT -s 10.0.0.1 -j logaccept-3 +-A INPUT -s 10.0.0.1 -j logpass-3 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 +-A INPUT -s 10.0.0.1 -j ACCEPT +-A INPUT -s 10.0.0.2 -j ACCEPT +-A INPUT -s 10.0.0.1 +-A INPUT -s 10.0.0.2 +-A INPUT -s 10.0.0.1 -j logaccept-6 +-A INPUT -s 10.0.0.2 -j logaccept-6 +-A INPUT -s 10.0.0.1 -j logpass-6 +-A INPUT -s 10.0.0.2 -j logpass-6 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 +-A INPUT -i eth0 -j ACCEPT +-A INPUT -i eth0 +-A INPUT -i eth0 -j logaccept-18 +-A INPUT -i eth0 -j logpass-16 +-A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -d 172.16.0.0/16 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-19 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logpass-17 +-A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -d 172.16.0.0/16 +-A INPUT -i eth0 -d 172.16.2.0/16 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-20 +-A INPUT -i eth0 -d 172.16.2.0/16 -j logaccept-20 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logpass-18 +-A INPUT -i eth0 -d 172.16.2.0/16 -j logpass-18 +-A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 +-A INPUT -i eth0 -s 10.0.0.1 -j logaccept-21 +-A INPUT -i eth0 -s 10.0.0.1 -j logpass-19 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 +-A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 +-A INPUT -i eth0 -s 10.0.0.2 +-A INPUT -i eth0 -s 10.0.0.1 -j logaccept-24 +-A INPUT -i eth0 -s 10.0.0.2 -j logaccept-24 +-A INPUT -i eth0 -s 10.0.0.1 -j logpass-22 +-A INPUT -i eth0 -s 10.0.0.2 -j logpass-22 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 +-A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-36 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logpass-30 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-48 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-49 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-50 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-51 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-52 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-53 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-54 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-55 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-56 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-57 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-58 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-59 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-60 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-61 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-62 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-63 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-64 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-65 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-66 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-67 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-68 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-69 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-70 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-71 +-A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 +-A INPUT -i eth2 -s 10.1.0.0/12 +-A INPUT -i eth3 -s 10.1.0.0/12 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-45 +-A INPUT -i eth2 -s 10.1.0.0/12 -j logaccept-45 +-A INPUT -i eth3 -s 10.1.0.0/12 -j logaccept-45 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logpass-37 +-A INPUT -i eth2 -s 10.1.0.0/12 -j logpass-37 +-A INPUT -i eth3 -s 10.1.0.0/12 -j logpass-37 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-72 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-72 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-72 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-73 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-73 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-73 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-74 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-74 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-74 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-75 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-75 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-75 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-76 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-76 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-76 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-77 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-77 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-77 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-78 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-78 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-78 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-79 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-79 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-79 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-80 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-80 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-80 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-81 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-81 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-81 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-82 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-82 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-82 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-83 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-83 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-83 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-84 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-84 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-84 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-85 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-85 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-85 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-86 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-86 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-86 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-87 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-87 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-87 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-88 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-88 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-88 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-89 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-89 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-89 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-90 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-90 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-90 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-91 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-91 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-91 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-92 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-92 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-92 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-93 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-93 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-93 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-94 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-94 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-94 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-95 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-95 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-95 +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-63 +-A INPUT -j logdrop-1 +-A INPUT -j logpass-50 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmp -j icmp-routing +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logpass-0 +-A OUTPUT -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -d 172.16.0.0/16 +-A OUTPUT -d 172.16.0.0/16 -j logaccept-1 +-A OUTPUT -d 172.16.0.0/16 -j logpass-1 +-A OUTPUT -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -d 172.16.0.0/16 +-A OUTPUT -d 172.16.2.0/16 +-A OUTPUT -d 172.16.0.0/16 -j logaccept-2 +-A OUTPUT -d 172.16.2.0/16 -j logaccept-2 +-A OUTPUT -d 172.16.0.0/16 -j logpass-2 +-A OUTPUT -d 172.16.2.0/16 -j logpass-2 +-A OUTPUT -s 10.0.0.1 -j ACCEPT +-A OUTPUT -s 10.0.0.1 +-A OUTPUT -s 10.0.0.1 -j logaccept-3 +-A OUTPUT -s 10.0.0.1 -j logpass-3 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 +-A OUTPUT -s 10.0.0.1 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -j ACCEPT +-A OUTPUT -s 10.0.0.1 +-A OUTPUT -s 10.0.0.2 +-A OUTPUT -s 10.0.0.1 -j logaccept-6 +-A OUTPUT -s 10.0.0.2 -j logaccept-6 +-A OUTPUT -s 10.0.0.1 -j logpass-6 +-A OUTPUT -s 10.0.0.2 -j logpass-6 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j logaccept-9 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j logpass-9 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-0 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-2 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-3 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-4 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-5 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-6 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-7 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-8 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-9 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-10 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-11 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-13 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-14 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-16 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-17 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-18 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-19 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-20 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-21 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-22 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-23 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-63 +-A OUTPUT -j logdrop-1 +-A OUTPUT -j logpass-50 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -p icmp -j icmp-routing +-A address-0 -d 172.16.0.0/16 -j ACCEPT +-A address-1 -d 172.16.0.0/16 +-A address-10 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-13 +-A address-100 -d 172.16.0.0/16 -j ACCEPT +-A address-100 -d 172.16.2.0/16 -j ACCEPT +-A address-101 -d 172.16.0.0/16 +-A address-101 -d 172.16.2.0/16 +-A address-102 -d 172.16.0.0/16 -j logaccept-56 +-A address-102 -d 172.16.2.0/16 -j logaccept-56 +-A address-103 -d 172.16.0.0/16 -j logpass-45 +-A address-103 -d 172.16.2.0/16 -j logpass-45 +-A address-104 -s 10.0.0.1 -j ACCEPT +-A address-105 -s 10.0.0.1 +-A address-106 -s 10.0.0.1 -j logaccept-57 +-A address-107 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A address-108 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-109 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-11 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-110 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-58 +-A address-111 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-112 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-112 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-113 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-113 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-114 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-59 +-A address-114 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-59 +-A address-115 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-46 +-A address-115 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-46 +-A address-116 -s 10.0.0.1 -j ACCEPT +-A address-116 -s 10.0.0.2 -j ACCEPT +-A address-117 -s 10.0.0.1 +-A address-117 -s 10.0.0.2 +-A address-118 -s 10.0.0.1 -j logaccept-60 +-A address-118 -s 10.0.0.2 -j logaccept-60 +-A address-119 -s 10.0.0.1 -j logpass-47 +-A address-119 -s 10.0.0.2 -j logpass-47 +-A address-12 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-12 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-120 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-120 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-121 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-121 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-122 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-61 +-A address-122 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-61 +-A address-123 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-48 +-A address-123 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-48 +-A address-124 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-124 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-124 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-124 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-125 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-125 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-125 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-125 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-126 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-62 +-A address-126 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-62 +-A address-126 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-62 +-A address-126 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-62 +-A address-127 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-49 +-A address-127 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-49 +-A address-127 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-49 +-A address-127 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-49 +-A address-13 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-13 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-14 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-14 +-A address-14 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-14 +-A address-15 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-12 +-A address-15 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-12 +-A address-16 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-16 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-17 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-17 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-18 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-16 +-A address-18 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-16 +-A address-19 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-14 +-A address-19 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-14 +-A address-2 -d 172.16.0.0/16 -j logaccept-10 +-A address-20 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-20 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-20 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-20 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-21 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-21 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-21 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-21 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-22 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-17 +-A address-22 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-17 +-A address-22 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-17 +-A address-22 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-17 +-A address-23 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-15 +-A address-23 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-15 +-A address-23 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-15 +-A address-23 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-15 +-A address-24 -d 172.16.0.0/16 -j ACCEPT +-A address-25 -d 172.16.0.0/16 +-A address-26 -d 172.16.0.0/16 -j logaccept-28 +-A address-27 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-28 -d 172.16.0.0/16 -j ACCEPT +-A address-28 -d 172.16.2.0/16 -j ACCEPT +-A address-29 -d 172.16.0.0/16 +-A address-29 -d 172.16.2.0/16 +-A address-3 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-30 -d 172.16.0.0/16 -j logaccept-29 +-A address-30 -d 172.16.2.0/16 -j logaccept-29 +-A address-31 -d 172.16.0.0/16 -j logpass-25 +-A address-31 -d 172.16.2.0/16 -j logpass-25 +-A address-32 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-33 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-34 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-31 +-A address-35 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-36 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-36 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-37 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-37 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-38 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-32 +-A address-38 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-32 +-A address-39 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-26 +-A address-39 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-26 +-A address-4 -d 172.16.0.0/16 -j ACCEPT +-A address-4 -d 172.16.2.0/16 -j ACCEPT +-A address-40 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-40 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-41 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-41 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-42 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-34 +-A address-42 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-34 +-A address-43 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-28 +-A address-43 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-28 +-A address-44 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-44 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-44 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-44 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-45 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-45 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-45 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-45 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-46 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-35 +-A address-46 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-35 +-A address-46 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-35 +-A address-46 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-35 +-A address-47 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-29 +-A address-47 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-29 +-A address-47 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-29 +-A address-47 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-29 +-A address-48 -s 10.0.0.1 -j ACCEPT +-A address-49 -s 10.0.0.1 +-A address-5 -d 172.16.0.0/16 +-A address-5 -d 172.16.2.0/16 +-A address-50 -s 10.0.0.1 -j logaccept-39 +-A address-51 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A address-52 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-53 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-54 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-40 +-A address-55 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-56 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-56 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-57 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-57 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-58 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-41 +-A address-58 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-41 +-A address-59 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-33 +-A address-59 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-33 +-A address-6 -d 172.16.0.0/16 -j logaccept-11 +-A address-6 -d 172.16.2.0/16 -j logaccept-11 +-A address-60 -s 10.0.0.1 -j ACCEPT +-A address-60 -s 10.0.0.2 -j ACCEPT +-A address-61 -s 10.0.0.1 +-A address-61 -s 10.0.0.2 +-A address-62 -s 10.0.0.1 -j logaccept-42 +-A address-62 -s 10.0.0.2 -j logaccept-42 +-A address-63 -s 10.0.0.1 -j logpass-34 +-A address-63 -s 10.0.0.2 -j logpass-34 +-A address-64 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-64 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-65 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-65 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-66 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-43 +-A address-66 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-43 +-A address-67 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-35 +-A address-67 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-35 +-A address-68 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-68 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-68 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-68 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-69 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-69 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-69 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-69 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-7 -d 172.16.0.0/16 -j logpass-10 +-A address-7 -d 172.16.2.0/16 -j logpass-10 +-A address-70 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-44 +-A address-70 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-44 +-A address-70 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-44 +-A address-70 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-44 +-A address-71 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-36 +-A address-71 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-36 +-A address-71 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-36 +-A address-71 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-36 +-A address-72 -s 10.0.0.1 -j ACCEPT +-A address-73 -s 10.0.0.1 +-A address-74 -s 10.0.0.1 -j logaccept-48 +-A address-75 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A address-76 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-77 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-78 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-49 +-A address-79 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-8 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-80 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-80 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-81 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-81 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-82 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-50 +-A address-82 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-50 +-A address-83 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-40 +-A address-83 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-40 +-A address-84 -s 10.0.0.1 -j ACCEPT +-A address-84 -s 10.0.0.2 -j ACCEPT +-A address-85 -s 10.0.0.1 +-A address-85 -s 10.0.0.2 +-A address-86 -s 10.0.0.1 -j logaccept-51 +-A address-86 -s 10.0.0.2 -j logaccept-51 +-A address-87 -s 10.0.0.1 -j logpass-41 +-A address-87 -s 10.0.0.2 -j logpass-41 +-A address-88 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-88 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-89 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-89 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-9 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-90 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-52 +-A address-90 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-52 +-A address-91 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-42 +-A address-91 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-42 +-A address-92 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-92 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-92 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-92 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-93 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-93 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-93 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-93 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-94 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-53 +-A address-94 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-53 +-A address-94 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-53 +-A address-94 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-53 +-A address-95 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-43 +-A address-95 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-43 +-A address-95 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-43 +-A address-95 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-43 +-A address-96 -d 172.16.0.0/16 -j ACCEPT +-A address-97 -d 172.16.0.0/16 +-A address-98 -d 172.16.0.0/16 -j logaccept-55 +-A address-99 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A icmp-routing -p icmp --icmp-type 3 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 11 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 12 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logaccept-1 -m limit --limit 1/second -j LOG +-A logaccept-1 -j ACCEPT +-A logaccept-10 -m limit --limit 1/second -j LOG +-A logaccept-10 -j ACCEPT +-A logaccept-11 -m limit --limit 1/second -j LOG +-A logaccept-11 -j ACCEPT +-A logaccept-12 -m limit --limit 1/second -j LOG +-A logaccept-12 -j ACCEPT +-A logaccept-13 -m limit --limit 1/second -j LOG +-A logaccept-13 -j ACCEPT +-A logaccept-14 -m limit --limit 1/second -j LOG +-A logaccept-14 -j ACCEPT +-A logaccept-15 -m limit --limit 1/second -j LOG +-A logaccept-15 -j ACCEPT +-A logaccept-16 -m limit --limit 1/second -j LOG +-A logaccept-16 -j ACCEPT +-A logaccept-17 -m limit --limit 1/second -j LOG +-A logaccept-17 -j ACCEPT +-A logaccept-18 -m limit --limit 1/second -j LOG +-A logaccept-18 -j ACCEPT +-A logaccept-19 -m limit --limit 1/second -j LOG +-A logaccept-19 -j ACCEPT +-A logaccept-2 -m limit --limit 1/second -j LOG +-A logaccept-2 -j ACCEPT +-A logaccept-20 -m limit --limit 1/second -j LOG +-A logaccept-20 -j ACCEPT +-A logaccept-21 -m limit --limit 1/second -j LOG +-A logaccept-21 -j ACCEPT +-A logaccept-22 -m limit --limit 1/second -j LOG +-A logaccept-22 -j ACCEPT +-A logaccept-23 -m limit --limit 1/second -j LOG +-A logaccept-23 -j ACCEPT +-A logaccept-24 -m limit --limit 1/second -j LOG +-A logaccept-24 -j ACCEPT +-A logaccept-25 -m limit --limit 1/second -j LOG +-A logaccept-25 -j ACCEPT +-A logaccept-26 -m limit --limit 1/second -j LOG +-A logaccept-26 -j ACCEPT +-A logaccept-27 -m limit --limit 1/second -j LOG +-A logaccept-27 -j ACCEPT +-A logaccept-28 -m limit --limit 1/second -j LOG +-A logaccept-28 -j ACCEPT +-A logaccept-29 -m limit --limit 1/second -j LOG +-A logaccept-29 -j ACCEPT +-A logaccept-3 -m limit --limit 1/second -j LOG +-A logaccept-3 -j ACCEPT +-A logaccept-30 -m limit --limit 1/second -j LOG +-A logaccept-30 -j ACCEPT +-A logaccept-31 -m limit --limit 1/second -j LOG +-A logaccept-31 -j ACCEPT +-A logaccept-32 -m limit --limit 1/second -j LOG +-A logaccept-32 -j ACCEPT +-A logaccept-33 -m limit --limit 1/second -j LOG +-A logaccept-33 -j ACCEPT +-A logaccept-34 -m limit --limit 1/second -j LOG +-A logaccept-34 -j ACCEPT +-A logaccept-35 -m limit --limit 1/second -j LOG +-A logaccept-35 -j ACCEPT +-A logaccept-36 -m limit --limit 1/second -j LOG +-A logaccept-36 -j ACCEPT +-A logaccept-37 -m limit --limit 1/second -j LOG +-A logaccept-37 -j ACCEPT +-A logaccept-38 -m limit --limit 1/second -j LOG +-A logaccept-38 -j ACCEPT +-A logaccept-39 -m limit --limit 1/second -j LOG +-A logaccept-39 -j ACCEPT +-A logaccept-4 -m limit --limit 1/second -j LOG +-A logaccept-4 -j ACCEPT +-A logaccept-40 -m limit --limit 1/second -j LOG +-A logaccept-40 -j ACCEPT +-A logaccept-41 -m limit --limit 1/second -j LOG +-A logaccept-41 -j ACCEPT +-A logaccept-42 -m limit --limit 1/second -j LOG +-A logaccept-42 -j ACCEPT +-A logaccept-43 -m limit --limit 1/second -j LOG +-A logaccept-43 -j ACCEPT +-A logaccept-44 -m limit --limit 1/second -j LOG +-A logaccept-44 -j ACCEPT +-A logaccept-45 -m limit --limit 1/second -j LOG +-A logaccept-45 -j ACCEPT +-A logaccept-46 -m limit --limit 1/second -j LOG +-A logaccept-46 -j ACCEPT +-A logaccept-47 -m limit --limit 1/second -j LOG +-A logaccept-47 -j ACCEPT +-A logaccept-48 -m limit --limit 1/second -j LOG +-A logaccept-48 -j ACCEPT +-A logaccept-49 -m limit --limit 1/second -j LOG +-A logaccept-49 -j ACCEPT +-A logaccept-5 -m limit --limit 1/second -j LOG +-A logaccept-5 -j ACCEPT +-A logaccept-50 -m limit --limit 1/second -j LOG +-A logaccept-50 -j ACCEPT +-A logaccept-51 -m limit --limit 1/second -j LOG +-A logaccept-51 -j ACCEPT +-A logaccept-52 -m limit --limit 1/second -j LOG +-A logaccept-52 -j ACCEPT +-A logaccept-53 -m limit --limit 1/second -j LOG +-A logaccept-53 -j ACCEPT +-A logaccept-54 -m limit --limit 1/second -j LOG +-A logaccept-54 -j ACCEPT +-A logaccept-55 -m limit --limit 1/second -j LOG +-A logaccept-55 -j ACCEPT +-A logaccept-56 -m limit --limit 1/second -j LOG +-A logaccept-56 -j ACCEPT +-A logaccept-57 -m limit --limit 1/second -j LOG +-A logaccept-57 -j ACCEPT +-A logaccept-58 -m limit --limit 1/second -j LOG +-A logaccept-58 -j ACCEPT +-A logaccept-59 -m limit --limit 1/second -j LOG +-A logaccept-59 -j ACCEPT +-A logaccept-6 -m limit --limit 1/second -j LOG +-A logaccept-6 -j ACCEPT +-A logaccept-60 -m limit --limit 1/second -j LOG +-A logaccept-60 -j ACCEPT +-A logaccept-61 -m limit --limit 1/second -j LOG +-A logaccept-61 -j ACCEPT +-A logaccept-62 -m limit --limit 1/second -j LOG +-A logaccept-62 -j ACCEPT +-A logaccept-63 -m limit --limit 1/second -j LOG +-A logaccept-63 -j ACCEPT +-A logaccept-7 -m limit --limit 1/second -j LOG +-A logaccept-7 -j ACCEPT +-A logaccept-8 -m limit --limit 1/second -j LOG +-A logaccept-8 -j ACCEPT +-A logaccept-9 -m limit --limit 1/second -j LOG +-A logaccept-9 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-1 -m limit --limit 1/second -j LOG +-A logpass-10 -m limit --limit 1/second -j LOG +-A logpass-11 -m limit --limit 1/second -j LOG +-A logpass-12 -m limit --limit 1/second -j LOG +-A logpass-13 -m limit --limit 1/second -j LOG +-A logpass-14 -m limit --limit 1/second -j LOG +-A logpass-15 -m limit --limit 1/second -j LOG +-A logpass-16 -m limit --limit 1/second -j LOG +-A logpass-17 -m limit --limit 1/second -j LOG +-A logpass-18 -m limit --limit 1/second -j LOG +-A logpass-19 -m limit --limit 1/second -j LOG +-A logpass-2 -m limit --limit 1/second -j LOG +-A logpass-20 -m limit --limit 1/second -j LOG +-A logpass-21 -m limit --limit 1/second -j LOG +-A logpass-22 -m limit --limit 1/second -j LOG +-A logpass-23 -m limit --limit 1/second -j LOG +-A logpass-24 -m limit --limit 1/second -j LOG +-A logpass-25 -m limit --limit 1/second -j LOG +-A logpass-26 -m limit --limit 1/second -j LOG +-A logpass-27 -m limit --limit 1/second -j LOG +-A logpass-28 -m limit --limit 1/second -j LOG +-A logpass-29 -m limit --limit 1/second -j LOG +-A logpass-3 -m limit --limit 1/second -j LOG +-A logpass-30 -m limit --limit 1/second -j LOG +-A logpass-31 -m limit --limit 1/second -j LOG +-A logpass-32 -m limit --limit 1/second -j LOG +-A logpass-33 -m limit --limit 1/second -j LOG +-A logpass-34 -m limit --limit 1/second -j LOG +-A logpass-35 -m limit --limit 1/second -j LOG +-A logpass-36 -m limit --limit 1/second -j LOG +-A logpass-37 -m limit --limit 1/second -j LOG +-A logpass-38 -m limit --limit 1/second -j LOG +-A logpass-39 -m limit --limit 1/second -j LOG +-A logpass-4 -m limit --limit 1/second -j LOG +-A logpass-40 -m limit --limit 1/second -j LOG +-A logpass-41 -m limit --limit 1/second -j LOG +-A logpass-42 -m limit --limit 1/second -j LOG +-A logpass-43 -m limit --limit 1/second -j LOG +-A logpass-44 -m limit --limit 1/second -j LOG +-A logpass-45 -m limit --limit 1/second -j LOG +-A logpass-46 -m limit --limit 1/second -j LOG +-A logpass-47 -m limit --limit 1/second -j LOG +-A logpass-48 -m limit --limit 1/second -j LOG +-A logpass-49 -m limit --limit 1/second -j LOG +-A logpass-5 -m limit --limit 1/second -j LOG +-A logpass-50 -m limit --limit 1/second -j LOG +-A logpass-6 -m limit --limit 1/second -j LOG +-A logpass-7 -m limit --limit 1/second -j LOG +-A logpass-8 -m limit --limit 1/second -j LOG +-A logpass-9 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:FORWARD ACCEPT [0:0] +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*nat +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +:awall-masquerade - [0:0] +-A INPUT -j MASQUERADE +-A OUTPUT -j REDIRECT +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE +-A POSTROUTING -m set --match-set awall-masquerade src -j awall-masquerade +-A PREROUTING -i eth0 -j REDIRECT +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT +-A awall-masquerade -m set ! --match-set awall-masquerade dst -j MASQUERADE +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT diff --git a/test/output/address/rules6-save b/test/output/address/rules6-save new file mode 100644 index 0000000..8612d82 --- /dev/null +++ b/test/output/address/rules6-save @@ -0,0 +1,189 @@ +# rules6-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logaccept-18 - [0:0] +:logaccept-27 - [0:0] +:logaccept-36 - [0:0] +:logaccept-45 - [0:0] +:logaccept-63 - [0:0] +:logaccept-9 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logpass-0 - [0:0] +:logpass-16 - [0:0] +:logpass-30 - [0:0] +:logpass-37 - [0:0] +:logpass-50 - [0:0] +:logpass-9 - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logpass-0 +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 +-A FORWARD -o eth1 -d fc00::/7 -j logaccept-9 +-A FORWARD -o eth1 -d fc00::/7 -j logpass-9 +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth0 +-A FORWARD -i eth0 -j logaccept-18 +-A FORWARD -i eth0 -j logpass-16 +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j logaccept-27 +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG +-A FORWARD -i eth1 -s fc00::/7 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 +-A FORWARD -i eth1 -s fc00::/7 -j logaccept-36 +-A FORWARD -i eth1 -s fc00::/7 -j logpass-30 +-A FORWARD -i eth1 -s fc00::/7 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 +-A FORWARD -i eth1 -s fc00::/7 -j logaccept-45 +-A FORWARD -i eth1 -s fc00::/7 -j logpass-37 +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-63 +-A FORWARD -j logdrop-1 +-A FORWARD -j logpass-50 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logpass-0 +-A INPUT -i eth0 -j ACCEPT +-A INPUT -i eth0 +-A INPUT -i eth0 -j logaccept-18 +-A INPUT -i eth0 -j logpass-16 +-A INPUT -i eth1 -s fc00::/7 -j ACCEPT +-A INPUT -i eth1 -s fc00::/7 +-A INPUT -i eth1 -s fc00::/7 -j logaccept-36 +-A INPUT -i eth1 -s fc00::/7 -j logpass-30 +-A INPUT -i eth1 -s fc00::/7 -j ACCEPT +-A INPUT -i eth1 -s fc00::/7 +-A INPUT -i eth1 -s fc00::/7 -j logaccept-45 +-A INPUT -i eth1 -s fc00::/7 -j logpass-37 +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-63 +-A INPUT -j logdrop-1 +-A INPUT -j logpass-50 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmpv6 -j ACCEPT +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logpass-0 +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 +-A OUTPUT -o eth1 -d fc00::/7 -j logaccept-9 +-A OUTPUT -o eth1 -d fc00::/7 -j logpass-9 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-63 +-A OUTPUT -j logdrop-1 +-A OUTPUT -j logpass-50 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -p icmpv6 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logaccept-18 -m limit --limit 1/second -j LOG +-A logaccept-18 -j ACCEPT +-A logaccept-27 -m limit --limit 1/second -j LOG +-A logaccept-27 -j ACCEPT +-A logaccept-36 -m limit --limit 1/second -j LOG +-A logaccept-36 -j ACCEPT +-A logaccept-45 -m limit --limit 1/second -j LOG +-A logaccept-45 -j ACCEPT +-A logaccept-63 -m limit --limit 1/second -j LOG +-A logaccept-63 -j ACCEPT +-A logaccept-9 -m limit --limit 1/second -j LOG +-A logaccept-9 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-16 -m limit --limit 1/second -j LOG +-A logpass-30 -m limit --limit 1/second -j LOG +-A logpass-37 -m limit --limit 1/second -j LOG +-A logpass-50 -m limit --limit 1/second -j LOG +-A logpass-9 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT diff --git a/test/output/dump b/test/output/filter-limit/dump index 57eccbb..281fd03 100644 --- a/test/output/dump +++ b/test/output/filter-limit/dump @@ -8,3170 +8,911 @@ Dnat 2 {"in":"B"} inet/nat/PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT -Filter 1 {} -(address) - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 2 {"action":"pass"} -(address) - inet/filter/FORWARD - inet6/filter/FORWARD - inet/filter/INPUT - inet6/filter/INPUT - inet/filter/OUTPUT - inet6/filter/OUTPUT - -Filter 3 {"log":true} -(address) - inet/filter/FORWARD -j logaccept-0 - inet6/filter/FORWARD -j logaccept-0 - inet/filter/INPUT -j logaccept-0 - inet6/filter/INPUT -j logaccept-0 - inet/filter/OUTPUT -j logaccept-0 - inet6/filter/OUTPUT -j logaccept-0 - inet/filter/logaccept-0 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG - inet/filter/logaccept-0 -j ACCEPT - inet6/filter/logaccept-0 -j ACCEPT - -Filter 4 {"action":"pass","log":true} -(address) - inet/filter/FORWARD -j logpass-0 - inet6/filter/FORWARD -j logpass-0 - inet/filter/INPUT -j logpass-0 - inet6/filter/INPUT -j logpass-0 - inet/filter/OUTPUT -j logpass-0 - inet6/filter/OUTPUT -j logpass-0 - inet/filter/logpass-0 -m limit --limit 1/second -j LOG - inet6/filter/logpass-0 -m limit --limit 1/second -j LOG - -Filter 5 {"dest":"172.16.0.0\/16"} -(address) - inet/filter/FORWARD -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -d 172.16.0.0/16 -j ACCEPT - inet/filter/OUTPUT -d 172.16.0.0/16 -j ACCEPT - -Filter 6 {"action":"pass","dest":"172.16.0.0\/16"} -(address) - inet/filter/FORWARD -d 172.16.0.0/16 - inet/filter/INPUT -d 172.16.0.0/16 - inet/filter/OUTPUT -d 172.16.0.0/16 - -Filter 7 {"dest":"172.16.0.0\/16","log":true} -(address) - inet/filter/FORWARD -d 172.16.0.0/16 -j logaccept-1 - inet/filter/INPUT -d 172.16.0.0/16 -j logaccept-1 - inet/filter/OUTPUT -d 172.16.0.0/16 -j logaccept-1 - inet/filter/logaccept-1 -m limit --limit 1/second -j LOG - inet/filter/logaccept-1 -j ACCEPT - -Filter 8 {"action":"pass","dest":"172.16.0.0\/16","log":true} -(address) - inet/filter/FORWARD -d 172.16.0.0/16 -j logpass-1 - inet/filter/INPUT -d 172.16.0.0/16 -j logpass-1 - inet/filter/OUTPUT -d 172.16.0.0/16 -j logpass-1 - inet/filter/logpass-1 -m limit --limit 1/second -j LOG - -Filter 9 {"dest":["172.16.0.0\/16","172.16.2.0\/16"]} -(address) - inet/filter/FORWARD -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -d 172.16.2.0/16 -j ACCEPT - inet/filter/OUTPUT -d 172.16.0.0/16 -j ACCEPT - inet/filter/OUTPUT -d 172.16.2.0/16 -j ACCEPT - -Filter 10 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"]} -(address) - inet/filter/FORWARD -d 172.16.0.0/16 - inet/filter/INPUT -d 172.16.0.0/16 - inet/filter/FORWARD -d 172.16.2.0/16 - inet/filter/INPUT -d 172.16.2.0/16 - inet/filter/OUTPUT -d 172.16.0.0/16 - inet/filter/OUTPUT -d 172.16.2.0/16 - -Filter 11 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true} -(address) - inet/filter/FORWARD -d 172.16.0.0/16 -j logaccept-2 - inet/filter/INPUT -d 172.16.0.0/16 -j logaccept-2 - inet/filter/FORWARD -d 172.16.2.0/16 -j logaccept-2 - inet/filter/INPUT -d 172.16.2.0/16 -j logaccept-2 - inet/filter/OUTPUT -d 172.16.0.0/16 -j logaccept-2 - inet/filter/OUTPUT -d 172.16.2.0/16 -j logaccept-2 - inet/filter/logaccept-2 -m limit --limit 1/second -j LOG - inet/filter/logaccept-2 -j ACCEPT - -Filter 12 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true} -(address) - inet/filter/FORWARD -d 172.16.0.0/16 -j logpass-2 - inet/filter/INPUT -d 172.16.0.0/16 -j logpass-2 - inet/filter/FORWARD -d 172.16.2.0/16 -j logpass-2 - inet/filter/INPUT -d 172.16.2.0/16 -j logpass-2 - inet/filter/OUTPUT -d 172.16.0.0/16 -j logpass-2 - inet/filter/OUTPUT -d 172.16.2.0/16 -j logpass-2 - inet/filter/logpass-2 -m limit --limit 1/second -j LOG - -Filter 13 {"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -j ACCEPT - inet/filter/INPUT -s 10.0.0.1 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.1 -j ACCEPT - -Filter 14 {"action":"pass","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 - inet/filter/INPUT -s 10.0.0.1 - inet/filter/OUTPUT -s 10.0.0.1 - -Filter 15 {"log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -j logaccept-3 - inet/filter/INPUT -s 10.0.0.1 -j logaccept-3 - inet/filter/OUTPUT -s 10.0.0.1 -j logaccept-3 - inet/filter/logaccept-3 -m limit --limit 1/second -j LOG - inet/filter/logaccept-3 -j ACCEPT - -Filter 16 {"action":"pass","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -j logpass-3 - inet/filter/INPUT -s 10.0.0.1 -j logpass-3 - inet/filter/OUTPUT -s 10.0.0.1 -j logpass-3 - inet/filter/logpass-3 -m limit --limit 1/second -j LOG - -Filter 17 {"dest":"172.16.0.0\/16","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - -Filter 18 {"action":"pass","dest":"172.16.0.0\/16","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 - -Filter 19 {"dest":"172.16.0.0\/16","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 - inet/filter/logaccept-4 -m limit --limit 1/second -j LOG - inet/filter/logaccept-4 -j ACCEPT - -Filter 20 {"action":"pass","dest":"172.16.0.0\/16","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 - inet/filter/logpass-4 -m limit --limit 1/second -j LOG - -Filter 21 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - -Filter 22 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 - -Filter 23 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 - inet/filter/logaccept-5 -m limit --limit 1/second -j LOG - inet/filter/logaccept-5 -j ACCEPT - -Filter 24 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 - inet/filter/logpass-5 -m limit --limit 1/second -j LOG - -Filter 25 {"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -j ACCEPT - inet/filter/INPUT -s 10.0.0.1 -j ACCEPT - inet/filter/FORWARD -s 10.0.0.2 -j ACCEPT - inet/filter/INPUT -s 10.0.0.2 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.1 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.2 -j ACCEPT - -Filter 26 {"action":"pass","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 - inet/filter/INPUT -s 10.0.0.1 - inet/filter/FORWARD -s 10.0.0.2 - inet/filter/INPUT -s 10.0.0.2 - inet/filter/OUTPUT -s 10.0.0.1 - inet/filter/OUTPUT -s 10.0.0.2 - -Filter 27 {"log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -j logaccept-6 - inet/filter/INPUT -s 10.0.0.1 -j logaccept-6 - inet/filter/FORWARD -s 10.0.0.2 -j logaccept-6 - inet/filter/INPUT -s 10.0.0.2 -j logaccept-6 - inet/filter/OUTPUT -s 10.0.0.1 -j logaccept-6 - inet/filter/OUTPUT -s 10.0.0.2 -j logaccept-6 - inet/filter/logaccept-6 -m limit --limit 1/second -j LOG - inet/filter/logaccept-6 -j ACCEPT - -Filter 28 {"action":"pass","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -j logpass-6 - inet/filter/INPUT -s 10.0.0.1 -j logpass-6 - inet/filter/FORWARD -s 10.0.0.2 -j logpass-6 - inet/filter/INPUT -s 10.0.0.2 -j logpass-6 - inet/filter/OUTPUT -s 10.0.0.1 -j logpass-6 - inet/filter/OUTPUT -s 10.0.0.2 -j logpass-6 - inet/filter/logpass-6 -m limit --limit 1/second -j LOG - -Filter 29 {"dest":"172.16.0.0\/16","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - -Filter 30 {"action":"pass","dest":"172.16.0.0\/16","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 - -Filter 31 {"dest":"172.16.0.0\/16","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 - inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 - inet/filter/logaccept-7 -m limit --limit 1/second -j LOG - inet/filter/logaccept-7 -j ACCEPT - -Filter 32 {"action":"pass","dest":"172.16.0.0\/16","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 - inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 - inet/filter/logpass-7 -m limit --limit 1/second -j LOG - -Filter 33 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - -Filter 34 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 - inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 - -Filter 35 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 - inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 - inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 - inet/filter/logaccept-8 -m limit --limit 1/second -j LOG - inet/filter/logaccept-8 -j ACCEPT - -Filter 36 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 - inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 - inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 - inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 - inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 - inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 - inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 - inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 - inet/filter/logpass-8 -m limit --limit 1/second -j LOG - -Filter 37 {"out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j ACCEPT - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT - -Filter 38 {"action":"pass","out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 - inet6/filter/FORWARD -o eth1 -d fc00::/7 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 - -Filter 39 {"log":true,"out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j logaccept-9 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j logaccept-9 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j logaccept-9 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j logaccept-9 - inet/filter/logaccept-9 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-9 -m limit --limit 1/second -j LOG - inet/filter/logaccept-9 -j ACCEPT - inet6/filter/logaccept-9 -j ACCEPT - -Filter 40 {"action":"pass","log":true,"out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j logpass-9 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j logpass-9 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j logpass-9 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j logpass-9 - inet/filter/logpass-9 -m limit --limit 1/second -j LOG - inet6/filter/logpass-9 -m limit --limit 1/second -j LOG - -Filter 41 {"dest":"172.16.0.0\/16","out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-0 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-0 - inet/filter/address-0 -d 172.16.0.0/16 -j ACCEPT - -Filter 42 {"action":"pass","dest":"172.16.0.0\/16","out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-1 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-1 - inet/filter/address-1 -d 172.16.0.0/16 - -Filter 43 {"dest":"172.16.0.0\/16","log":true,"out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-2 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-2 - inet/filter/address-2 -d 172.16.0.0/16 -j logaccept-10 - inet/filter/logaccept-10 -m limit --limit 1/second -j LOG - inet/filter/logaccept-10 -j ACCEPT - -Filter 44 {"action":"pass","dest":"172.16.0.0\/16","log":true,"out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-3 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-3 - inet/filter/address-3 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG - -Filter 45 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-4 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-4 - inet/filter/address-4 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-4 -d 172.16.2.0/16 -j ACCEPT - -Filter 46 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-5 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-5 - inet/filter/address-5 -d 172.16.0.0/16 - inet/filter/address-5 -d 172.16.2.0/16 - -Filter 47 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-6 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-6 - inet/filter/address-6 -d 172.16.0.0/16 -j logaccept-11 - inet/filter/address-6 -d 172.16.2.0/16 -j logaccept-11 - inet/filter/logaccept-11 -m limit --limit 1/second -j LOG - inet/filter/logaccept-11 -j ACCEPT - -Filter 48 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-7 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-7 - inet/filter/address-7 -d 172.16.0.0/16 -j logpass-10 - inet/filter/address-7 -d 172.16.2.0/16 -j logpass-10 - inet/filter/logpass-10 -m limit --limit 1/second -j LOG - -Filter 49 {"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT - -Filter 50 {"action":"pass","out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 - -Filter 51 {"log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 - inet/filter/logaccept-12 -m limit --limit 1/second -j LOG - inet/filter/logaccept-12 -j ACCEPT - -Filter 52 {"action":"pass","log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 - inet/filter/logpass-11 -m limit --limit 1/second -j LOG - -Filter 53 {"dest":"172.16.0.0\/16","out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-8 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-8 - inet/filter/address-8 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - -Filter 54 {"action":"pass","dest":"172.16.0.0\/16","out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-9 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-9 - inet/filter/address-9 -s 10.0.0.1 -d 172.16.0.0/16 - -Filter 55 {"dest":"172.16.0.0\/16","log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-10 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-10 - inet/filter/address-10 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-13 - inet/filter/logaccept-13 -m limit --limit 1/second -j LOG - inet/filter/logaccept-13 -j ACCEPT - -Filter 56 {"action":"pass","dest":"172.16.0.0\/16","log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-11 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-11 - inet/filter/address-11 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG - -Filter 57 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-12 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-12 - inet/filter/address-12 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-12 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - -Filter 58 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-13 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-13 - inet/filter/address-13 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-13 -s 10.0.0.1 -d 172.16.2.0/16 - -Filter 59 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-14 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-14 - inet/filter/address-14 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-14 - inet/filter/address-14 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-14 - inet/filter/logaccept-14 -m limit --limit 1/second -j LOG - inet/filter/logaccept-14 -j ACCEPT - -Filter 60 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-15 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-15 - inet/filter/address-15 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-12 - inet/filter/address-15 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-12 - inet/filter/logpass-12 -m limit --limit 1/second -j LOG - -Filter 61 {"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT - -Filter 62 {"action":"pass","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 - -Filter 63 {"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 - inet/filter/logaccept-15 -m limit --limit 1/second -j LOG - inet/filter/logaccept-15 -j ACCEPT - -Filter 64 {"action":"pass","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 - inet/filter/logpass-13 -m limit --limit 1/second -j LOG - -Filter 65 {"dest":"172.16.0.0\/16","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-16 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-16 - inet/filter/address-16 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-16 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - -Filter 66 {"action":"pass","dest":"172.16.0.0\/16","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-17 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-17 - inet/filter/address-17 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-17 -s 10.0.0.2 -d 172.16.0.0/16 - -Filter 67 {"dest":"172.16.0.0\/16","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-18 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-18 - inet/filter/address-18 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-16 - inet/filter/address-18 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-16 - inet/filter/logaccept-16 -m limit --limit 1/second -j LOG - inet/filter/logaccept-16 -j ACCEPT - -Filter 68 {"action":"pass","dest":"172.16.0.0\/16","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-19 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-19 - inet/filter/address-19 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-14 - inet/filter/address-19 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-14 - inet/filter/logpass-14 -m limit --limit 1/second -j LOG - -Filter 69 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-20 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-20 - inet/filter/address-20 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-20 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/address-20 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-20 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - -Filter 70 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-21 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-21 - inet/filter/address-21 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-21 -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/address-21 -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/address-21 -s 10.0.0.2 -d 172.16.2.0/16 - -Filter 71 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-22 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-22 - inet/filter/address-22 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-17 - inet/filter/address-22 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-17 - inet/filter/address-22 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-17 - inet/filter/address-22 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-17 - inet/filter/logaccept-17 -m limit --limit 1/second -j LOG - inet/filter/logaccept-17 -j ACCEPT - -Filter 72 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-23 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-23 - inet/filter/address-23 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-15 - inet/filter/address-23 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-15 - inet/filter/address-23 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-15 - inet/filter/address-23 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-15 - inet/filter/logpass-15 -m limit --limit 1/second -j LOG - -Filter 73 {"in":"A"} -(address) - inet/filter/FORWARD -i eth0 -j ACCEPT - inet6/filter/FORWARD -i eth0 -j ACCEPT - inet/filter/INPUT -i eth0 -j ACCEPT - inet6/filter/INPUT -i eth0 -j ACCEPT - -Filter 74 {"action":"pass","in":"A"} -(address) - inet/filter/FORWARD -i eth0 - inet6/filter/FORWARD -i eth0 - inet/filter/INPUT -i eth0 - inet6/filter/INPUT -i eth0 - -Filter 75 {"in":"A","log":true} -(address) - inet/filter/FORWARD -i eth0 -j logaccept-18 - inet6/filter/FORWARD -i eth0 -j logaccept-18 - inet/filter/INPUT -i eth0 -j logaccept-18 - inet6/filter/INPUT -i eth0 -j logaccept-18 - inet/filter/logaccept-18 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-18 -m limit --limit 1/second -j LOG - inet/filter/logaccept-18 -j ACCEPT - inet6/filter/logaccept-18 -j ACCEPT - -Filter 76 {"action":"pass","in":"A","log":true} -(address) - inet/filter/FORWARD -i eth0 -j logpass-16 - inet6/filter/FORWARD -i eth0 -j logpass-16 - inet/filter/INPUT -i eth0 -j logpass-16 - inet6/filter/INPUT -i eth0 -j logpass-16 - inet/filter/logpass-16 -m limit --limit 1/second -j LOG - inet6/filter/logpass-16 -m limit --limit 1/second -j LOG - -Filter 77 {"dest":"172.16.0.0\/16","in":"A"} -(address) - inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT - -Filter 78 {"action":"pass","dest":"172.16.0.0\/16","in":"A"} -(address) - inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 - inet/filter/INPUT -i eth0 -d 172.16.0.0/16 - -Filter 79 {"dest":"172.16.0.0\/16","in":"A","log":true} -(address) - inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-19 - inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-19 - inet/filter/logaccept-19 -m limit --limit 1/second -j LOG - inet/filter/logaccept-19 -j ACCEPT - -Filter 80 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true} -(address) - inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-17 - inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logpass-17 - inet/filter/logpass-17 -m limit --limit 1/second -j LOG - -Filter 81 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A"} -(address) - inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -d 172.16.2.0/16 -j ACCEPT - -Filter 82 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A"} -(address) - inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 - inet/filter/INPUT -i eth0 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 - inet/filter/INPUT -i eth0 -d 172.16.2.0/16 - -Filter 83 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true} -(address) - inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-20 - inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-20 - inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 -j logaccept-20 - inet/filter/INPUT -i eth0 -d 172.16.2.0/16 -j logaccept-20 - inet/filter/logaccept-20 -m limit --limit 1/second -j LOG - inet/filter/logaccept-20 -j ACCEPT - -Filter 84 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true} -(address) - inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-18 - inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logpass-18 - inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 -j logpass-18 - inet/filter/INPUT -i eth0 -d 172.16.2.0/16 -j logpass-18 - inet/filter/logpass-18 -m limit --limit 1/second -j LOG - -Filter 85 {"in":"A","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.1 -j ACCEPT - -Filter 86 {"action":"pass","in":"A","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 - inet/filter/INPUT -i eth0 -s 10.0.0.1 - -Filter 87 {"in":"A","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logaccept-21 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logaccept-21 - inet/filter/logaccept-21 -m limit --limit 1/second -j LOG - inet/filter/logaccept-21 -j ACCEPT - -Filter 88 {"action":"pass","in":"A","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logpass-19 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logpass-19 - inet/filter/logpass-19 -m limit --limit 1/second -j LOG - -Filter 89 {"dest":"172.16.0.0\/16","in":"A","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - -Filter 90 {"action":"pass","dest":"172.16.0.0\/16","in":"A","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 - -Filter 91 {"dest":"172.16.0.0\/16","in":"A","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 - inet/filter/logaccept-22 -m limit --limit 1/second -j LOG - inet/filter/logaccept-22 -j ACCEPT - -Filter 92 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 - inet/filter/logpass-20 -m limit --limit 1/second -j LOG - -Filter 93 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - -Filter 94 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 - -Filter 95 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 - inet/filter/logaccept-23 -m limit --limit 1/second -j LOG - inet/filter/logaccept-23 -j ACCEPT - -Filter 96 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 - inet/filter/logpass-21 -m limit --limit 1/second -j LOG - -Filter 97 {"in":"A","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.1 -j ACCEPT - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.2 -j ACCEPT - -Filter 98 {"action":"pass","in":"A","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 - inet/filter/INPUT -i eth0 -s 10.0.0.1 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 - inet/filter/INPUT -i eth0 -s 10.0.0.2 - -Filter 99 {"in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logaccept-24 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logaccept-24 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -j logaccept-24 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -j logaccept-24 - inet/filter/logaccept-24 -m limit --limit 1/second -j LOG - inet/filter/logaccept-24 -j ACCEPT - -Filter 100 {"action":"pass","in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logpass-22 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logpass-22 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -j logpass-22 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -j logpass-22 - inet/filter/logpass-22 -m limit --limit 1/second -j LOG - -Filter 101 {"dest":"172.16.0.0\/16","in":"A","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - -Filter 102 {"action":"pass","dest":"172.16.0.0\/16","in":"A","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 - -Filter 103 {"dest":"172.16.0.0\/16","in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 - inet/filter/logaccept-25 -m limit --limit 1/second -j LOG - inet/filter/logaccept-25 -j ACCEPT - -Filter 104 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 - inet/filter/logpass-23 -m limit --limit 1/second -j LOG - -Filter 105 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - -Filter 106 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 - -Filter 107 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 - inet/filter/logaccept-26 -m limit --limit 1/second -j LOG - inet/filter/logaccept-26 -j ACCEPT - -Filter 108 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 - inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 - inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 - inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 - inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 - inet/filter/logpass-24 -m limit --limit 1/second -j LOG - -Filter 109 {"in":"A","out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT - inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT - -Filter 110 {"action":"pass","in":"A","out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 - inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 - -Filter 111 {"in":"A","log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j logaccept-27 - inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j logaccept-27 - inet/filter/logaccept-27 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-27 -m limit --limit 1/second -j LOG - inet/filter/logaccept-27 -j ACCEPT - inet6/filter/logaccept-27 -j ACCEPT - -Filter 112 {"action":"pass","in":"A","log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG - inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG - -Filter 113 {"dest":"172.16.0.0\/16","in":"A","out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-24 - inet/filter/address-24 -d 172.16.0.0/16 -j ACCEPT - -Filter 114 {"action":"pass","dest":"172.16.0.0\/16","in":"A","out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-25 - inet/filter/address-25 -d 172.16.0.0/16 - -Filter 115 {"dest":"172.16.0.0\/16","in":"A","log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-26 - inet/filter/address-26 -d 172.16.0.0/16 -j logaccept-28 - inet/filter/logaccept-28 -m limit --limit 1/second -j LOG - inet/filter/logaccept-28 -j ACCEPT - -Filter 116 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-27 - inet/filter/address-27 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG - -Filter 117 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-28 - inet/filter/address-28 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-28 -d 172.16.2.0/16 -j ACCEPT - -Filter 118 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-29 - inet/filter/address-29 -d 172.16.0.0/16 - inet/filter/address-29 -d 172.16.2.0/16 - -Filter 119 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-30 - inet/filter/address-30 -d 172.16.0.0/16 -j logaccept-29 - inet/filter/address-30 -d 172.16.2.0/16 -j logaccept-29 - inet/filter/logaccept-29 -m limit --limit 1/second -j LOG - inet/filter/logaccept-29 -j ACCEPT - -Filter 120 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-31 - inet/filter/address-31 -d 172.16.0.0/16 -j logpass-25 - inet/filter/address-31 -d 172.16.2.0/16 -j logpass-25 - inet/filter/logpass-25 -m limit --limit 1/second -j LOG - -Filter 121 {"in":"A","out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT - -Filter 122 {"action":"pass","in":"A","out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 - -Filter 123 {"in":"A","log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-30 - inet/filter/logaccept-30 -m limit --limit 1/second -j LOG - inet/filter/logaccept-30 -j ACCEPT - -Filter 124 {"action":"pass","in":"A","log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG - -Filter 125 {"dest":"172.16.0.0\/16","in":"A","out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-32 - inet/filter/address-32 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - -Filter 126 {"action":"pass","dest":"172.16.0.0\/16","in":"A","out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-33 - inet/filter/address-33 -s 10.0.0.1 -d 172.16.0.0/16 - -Filter 127 {"dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-34 - inet/filter/address-34 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-31 - inet/filter/logaccept-31 -m limit --limit 1/second -j LOG - inet/filter/logaccept-31 -j ACCEPT - -Filter 128 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-35 - inet/filter/address-35 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG - -Filter 129 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-36 - inet/filter/address-36 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-36 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - -Filter 130 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-37 - inet/filter/address-37 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-37 -s 10.0.0.1 -d 172.16.2.0/16 - -Filter 131 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-38 - inet/filter/address-38 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-32 - inet/filter/address-38 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-32 - inet/filter/logaccept-32 -m limit --limit 1/second -j LOG - inet/filter/logaccept-32 -j ACCEPT - -Filter 132 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-39 - inet/filter/address-39 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-26 - inet/filter/address-39 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-26 - inet/filter/logpass-26 -m limit --limit 1/second -j LOG - -Filter 133 {"in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT - -Filter 134 {"action":"pass","in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 - -Filter 135 {"in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-33 - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-33 - inet/filter/logaccept-33 -m limit --limit 1/second -j LOG - inet/filter/logaccept-33 -j ACCEPT - -Filter 136 {"action":"pass","in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-27 - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-27 - inet/filter/logpass-27 -m limit --limit 1/second -j LOG - -Filter 137 {"dest":"172.16.0.0\/16","in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-40 - inet/filter/address-40 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-40 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - -Filter 138 {"action":"pass","dest":"172.16.0.0\/16","in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-41 - inet/filter/address-41 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-41 -s 10.0.0.2 -d 172.16.0.0/16 - -Filter 139 {"dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-42 - inet/filter/address-42 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-34 - inet/filter/address-42 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-34 - inet/filter/logaccept-34 -m limit --limit 1/second -j LOG - inet/filter/logaccept-34 -j ACCEPT - -Filter 140 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-43 - inet/filter/address-43 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-28 - inet/filter/address-43 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-28 - inet/filter/logpass-28 -m limit --limit 1/second -j LOG - -Filter 141 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-44 - inet/filter/address-44 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-44 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/address-44 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-44 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - -Filter 142 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-45 - inet/filter/address-45 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-45 -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/address-45 -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/address-45 -s 10.0.0.2 -d 172.16.2.0/16 - -Filter 143 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-46 - inet/filter/address-46 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-35 - inet/filter/address-46 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-35 - inet/filter/address-46 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-35 - inet/filter/address-46 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-35 - inet/filter/logaccept-35 -m limit --limit 1/second -j LOG - inet/filter/logaccept-35 -j ACCEPT - -Filter 144 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-47 - inet/filter/address-47 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-29 - inet/filter/address-47 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-29 - inet/filter/address-47 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-29 - inet/filter/address-47 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-29 - inet/filter/logpass-29 -m limit --limit 1/second -j LOG - -Filter 145 {"in":"B"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT - inet6/filter/FORWARD -i eth1 -s fc00::/7 -j ACCEPT - inet6/filter/INPUT -i eth1 -s fc00::/7 -j ACCEPT - -Filter 146 {"action":"pass","in":"B"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 - inet6/filter/FORWARD -i eth1 -s fc00::/7 - inet6/filter/INPUT -i eth1 -s fc00::/7 - -Filter 147 {"in":"B","log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-36 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-36 - inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logaccept-36 - inet6/filter/INPUT -i eth1 -s fc00::/7 -j logaccept-36 - inet/filter/logaccept-36 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-36 -m limit --limit 1/second -j LOG - inet/filter/logaccept-36 -j ACCEPT - inet6/filter/logaccept-36 -j ACCEPT - -Filter 148 {"action":"pass","in":"B","log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-30 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logpass-30 - inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logpass-30 - inet6/filter/INPUT -i eth1 -s fc00::/7 -j logpass-30 - inet/filter/logpass-30 -m limit --limit 1/second -j LOG - inet6/filter/logpass-30 -m limit --limit 1/second -j LOG - -Filter 149 {"dest":"172.16.0.0\/16","in":"B"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT - -Filter 150 {"action":"pass","dest":"172.16.0.0\/16","in":"B"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 - -Filter 151 {"dest":"172.16.0.0\/16","in":"B","log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 - inet/filter/logaccept-37 -m limit --limit 1/second -j LOG - inet/filter/logaccept-37 -j ACCEPT - -Filter 152 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 - inet/filter/logpass-31 -m limit --limit 1/second -j LOG - -Filter 153 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT - -Filter 154 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 - -Filter 155 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 - inet/filter/logaccept-38 -m limit --limit 1/second -j LOG - inet/filter/logaccept-38 -j ACCEPT - -Filter 156 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 - inet/filter/logpass-32 -m limit --limit 1/second -j LOG - -Filter 157 {"in":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-48 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-48 - inet/filter/address-48 -s 10.0.0.1 -j ACCEPT - -Filter 158 {"action":"pass","in":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-49 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-49 - inet/filter/address-49 -s 10.0.0.1 - -Filter 159 {"in":"B","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-50 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-50 - inet/filter/address-50 -s 10.0.0.1 -j logaccept-39 - inet/filter/logaccept-39 -m limit --limit 1/second -j LOG - inet/filter/logaccept-39 -j ACCEPT - -Filter 160 {"action":"pass","in":"B","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-51 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-51 - inet/filter/address-51 -s 10.0.0.1 -m limit --limit 1/second -j LOG - -Filter 161 {"dest":"172.16.0.0\/16","in":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-52 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-52 - inet/filter/address-52 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - -Filter 162 {"action":"pass","dest":"172.16.0.0\/16","in":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-53 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-53 - inet/filter/address-53 -s 10.0.0.1 -d 172.16.0.0/16 - -Filter 163 {"dest":"172.16.0.0\/16","in":"B","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-54 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-54 - inet/filter/address-54 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-40 - inet/filter/logaccept-40 -m limit --limit 1/second -j LOG - inet/filter/logaccept-40 -j ACCEPT - -Filter 164 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-55 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-55 - inet/filter/address-55 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG - -Filter 165 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-56 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-56 - inet/filter/address-56 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-56 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - -Filter 166 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-57 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-57 - inet/filter/address-57 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-57 -s 10.0.0.1 -d 172.16.2.0/16 - -Filter 167 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-58 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-58 - inet/filter/address-58 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-41 - inet/filter/address-58 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-41 - inet/filter/logaccept-41 -m limit --limit 1/second -j LOG - inet/filter/logaccept-41 -j ACCEPT - -Filter 168 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-59 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-59 - inet/filter/address-59 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-33 - inet/filter/address-59 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-33 - inet/filter/logpass-33 -m limit --limit 1/second -j LOG - -Filter 169 {"in":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-60 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-60 - inet/filter/address-60 -s 10.0.0.1 -j ACCEPT - inet/filter/address-60 -s 10.0.0.2 -j ACCEPT - -Filter 170 {"action":"pass","in":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-61 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-61 - inet/filter/address-61 -s 10.0.0.1 - inet/filter/address-61 -s 10.0.0.2 - -Filter 171 {"in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-62 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-62 - inet/filter/address-62 -s 10.0.0.1 -j logaccept-42 - inet/filter/address-62 -s 10.0.0.2 -j logaccept-42 - inet/filter/logaccept-42 -m limit --limit 1/second -j LOG - inet/filter/logaccept-42 -j ACCEPT - -Filter 172 {"action":"pass","in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-63 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-63 - inet/filter/address-63 -s 10.0.0.1 -j logpass-34 - inet/filter/address-63 -s 10.0.0.2 -j logpass-34 - inet/filter/logpass-34 -m limit --limit 1/second -j LOG - -Filter 173 {"dest":"172.16.0.0\/16","in":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-64 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-64 - inet/filter/address-64 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-64 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - -Filter 174 {"action":"pass","dest":"172.16.0.0\/16","in":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-65 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-65 - inet/filter/address-65 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-65 -s 10.0.0.2 -d 172.16.0.0/16 - -Filter 175 {"dest":"172.16.0.0\/16","in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-66 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-66 - inet/filter/address-66 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-43 - inet/filter/address-66 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-43 - inet/filter/logaccept-43 -m limit --limit 1/second -j LOG - inet/filter/logaccept-43 -j ACCEPT - -Filter 176 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-67 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-67 - inet/filter/address-67 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-35 - inet/filter/address-67 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-35 - inet/filter/logpass-35 -m limit --limit 1/second -j LOG - -Filter 177 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-68 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-68 - inet/filter/address-68 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-68 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/address-68 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-68 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - -Filter 178 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-69 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-69 - inet/filter/address-69 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-69 -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/address-69 -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/address-69 -s 10.0.0.2 -d 172.16.2.0/16 - -Filter 179 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-70 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-70 - inet/filter/address-70 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-44 - inet/filter/address-70 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-44 - inet/filter/address-70 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-44 - inet/filter/address-70 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-44 - inet/filter/logaccept-44 -m limit --limit 1/second -j LOG - inet/filter/logaccept-44 -j ACCEPT - -Filter 180 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-71 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-71 - inet/filter/address-71 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-36 - inet/filter/address-71 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-36 - inet/filter/address-71 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-36 - inet/filter/address-71 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-36 - inet/filter/logpass-36 -m limit --limit 1/second -j LOG - -Filter 181 {"in":"B","out":"B"} -(address) - -Filter 182 {"action":"pass","in":"B","out":"B"} -(address) - -Filter 183 {"in":"B","log":true,"out":"B"} -(address) - -Filter 184 {"action":"pass","in":"B","log":true,"out":"B"} -(address) - -Filter 185 {"dest":"172.16.0.0\/16","in":"B","out":"B"} -(address) - -Filter 186 {"action":"pass","dest":"172.16.0.0\/16","in":"B","out":"B"} -(address) - -Filter 187 {"dest":"172.16.0.0\/16","in":"B","log":true,"out":"B"} -(address) - -Filter 188 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"out":"B"} -(address) - -Filter 189 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B"} -(address) - -Filter 190 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B"} -(address) - -Filter 191 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B"} -(address) - -Filter 192 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B"} -(address) - -Filter 193 {"in":"B","out":"B","src":"10.0.0.1"} -(address) - -Filter 194 {"action":"pass","in":"B","out":"B","src":"10.0.0.1"} -(address) - -Filter 195 {"in":"B","log":true,"out":"B","src":"10.0.0.1"} -(address) - -Filter 196 {"action":"pass","in":"B","log":true,"out":"B","src":"10.0.0.1"} -(address) - -Filter 197 {"dest":"172.16.0.0\/16","in":"B","out":"B","src":"10.0.0.1"} -(address) - -Filter 198 {"action":"pass","dest":"172.16.0.0\/16","in":"B","out":"B","src":"10.0.0.1"} -(address) - -Filter 199 {"dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":"10.0.0.1"} -(address) - -Filter 200 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":"10.0.0.1"} -(address) - -Filter 201 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":"10.0.0.1"} -(address) - -Filter 202 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":"10.0.0.1"} -(address) - -Filter 203 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":"10.0.0.1"} -(address) - -Filter 204 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":"10.0.0.1"} -(address) - -Filter 205 {"in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 206 {"action":"pass","in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 207 {"in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 208 {"action":"pass","in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 209 {"dest":"172.16.0.0\/16","in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 210 {"action":"pass","dest":"172.16.0.0\/16","in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 211 {"dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 212 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 213 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 214 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 215 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 216 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - -Filter 217 {"in":["B","C"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT - inet6/filter/FORWARD -i eth1 -s fc00::/7 -j ACCEPT - inet6/filter/INPUT -i eth1 -s fc00::/7 -j ACCEPT - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j ACCEPT - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j ACCEPT - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j ACCEPT - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j ACCEPT - -Filter 218 {"action":"pass","in":["B","C"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 - inet6/filter/FORWARD -i eth1 -s fc00::/7 - inet6/filter/INPUT -i eth1 -s fc00::/7 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 - -Filter 219 {"in":["B","C"],"log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-45 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-45 - inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logaccept-45 - inet6/filter/INPUT -i eth1 -s fc00::/7 -j logaccept-45 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j logaccept-45 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j logaccept-45 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j logaccept-45 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j logaccept-45 - inet/filter/logaccept-45 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-45 -m limit --limit 1/second -j LOG - inet/filter/logaccept-45 -j ACCEPT - inet6/filter/logaccept-45 -j ACCEPT - -Filter 220 {"action":"pass","in":["B","C"],"log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-37 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logpass-37 - inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logpass-37 - inet6/filter/INPUT -i eth1 -s fc00::/7 -j logpass-37 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j logpass-37 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j logpass-37 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j logpass-37 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j logpass-37 - inet/filter/logpass-37 -m limit --limit 1/second -j LOG - inet6/filter/logpass-37 -m limit --limit 1/second -j LOG - -Filter 221 {"dest":"172.16.0.0\/16","in":["B","C"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT - -Filter 222 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 - -Filter 223 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 - inet/filter/logaccept-46 -m limit --limit 1/second -j LOG - inet/filter/logaccept-46 -j ACCEPT - -Filter 224 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 - inet/filter/logpass-38 -m limit --limit 1/second -j LOG - -Filter 225 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT - -Filter 226 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 - -Filter 227 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 - inet/filter/logaccept-47 -m limit --limit 1/second -j LOG - inet/filter/logaccept-47 -j ACCEPT - -Filter 228 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 - inet/filter/logpass-39 -m limit --limit 1/second -j LOG - -Filter 229 {"in":["B","C"],"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-72 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-72 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-72 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-72 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-72 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-72 - inet/filter/address-72 -s 10.0.0.1 -j ACCEPT - -Filter 230 {"action":"pass","in":["B","C"],"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-73 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-73 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-73 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-73 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-73 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-73 - inet/filter/address-73 -s 10.0.0.1 - -Filter 231 {"in":["B","C"],"log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-74 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-74 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-74 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-74 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-74 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-74 - inet/filter/address-74 -s 10.0.0.1 -j logaccept-48 - inet/filter/logaccept-48 -m limit --limit 1/second -j LOG - inet/filter/logaccept-48 -j ACCEPT - -Filter 232 {"action":"pass","in":["B","C"],"log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-75 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-75 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-75 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-75 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-75 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-75 - inet/filter/address-75 -s 10.0.0.1 -m limit --limit 1/second -j LOG - -Filter 233 {"dest":"172.16.0.0\/16","in":["B","C"],"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-76 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-76 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-76 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-76 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-76 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-76 - inet/filter/address-76 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - -Filter 234 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-77 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-77 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-77 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-77 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-77 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-77 - inet/filter/address-77 -s 10.0.0.1 -d 172.16.0.0/16 - -Filter 235 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-78 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-78 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-78 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-78 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-78 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-78 - inet/filter/address-78 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-49 - inet/filter/logaccept-49 -m limit --limit 1/second -j LOG - inet/filter/logaccept-49 -j ACCEPT - -Filter 236 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-79 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-79 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-79 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-79 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-79 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-79 - inet/filter/address-79 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG - -Filter 237 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-80 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-80 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-80 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-80 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-80 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-80 - inet/filter/address-80 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-80 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - -Filter 238 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-81 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-81 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-81 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-81 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-81 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-81 - inet/filter/address-81 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-81 -s 10.0.0.1 -d 172.16.2.0/16 - -Filter 239 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-82 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-82 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-82 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-82 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-82 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-82 - inet/filter/address-82 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-50 - inet/filter/address-82 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-50 - inet/filter/logaccept-50 -m limit --limit 1/second -j LOG - inet/filter/logaccept-50 -j ACCEPT - -Filter 240 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-83 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-83 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-83 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-83 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-83 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-83 - inet/filter/address-83 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-40 - inet/filter/address-83 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-40 - inet/filter/logpass-40 -m limit --limit 1/second -j LOG - -Filter 241 {"in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-84 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-84 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-84 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-84 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-84 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-84 - inet/filter/address-84 -s 10.0.0.1 -j ACCEPT - inet/filter/address-84 -s 10.0.0.2 -j ACCEPT - -Filter 242 {"action":"pass","in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-85 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-85 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-85 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-85 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-85 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-85 - inet/filter/address-85 -s 10.0.0.1 - inet/filter/address-85 -s 10.0.0.2 - -Filter 243 {"in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-86 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-86 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-86 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-86 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-86 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-86 - inet/filter/address-86 -s 10.0.0.1 -j logaccept-51 - inet/filter/address-86 -s 10.0.0.2 -j logaccept-51 - inet/filter/logaccept-51 -m limit --limit 1/second -j LOG - inet/filter/logaccept-51 -j ACCEPT - -Filter 244 {"action":"pass","in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-87 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-87 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-87 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-87 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-87 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-87 - inet/filter/address-87 -s 10.0.0.1 -j logpass-41 - inet/filter/address-87 -s 10.0.0.2 -j logpass-41 - inet/filter/logpass-41 -m limit --limit 1/second -j LOG - -Filter 245 {"dest":"172.16.0.0\/16","in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-88 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-88 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-88 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-88 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-88 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-88 - inet/filter/address-88 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-88 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - -Filter 246 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-89 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-89 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-89 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-89 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-89 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-89 - inet/filter/address-89 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-89 -s 10.0.0.2 -d 172.16.0.0/16 - -Filter 247 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-90 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-90 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-90 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-90 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-90 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-90 - inet/filter/address-90 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-52 - inet/filter/address-90 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-52 - inet/filter/logaccept-52 -m limit --limit 1/second -j LOG - inet/filter/logaccept-52 -j ACCEPT - -Filter 248 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-91 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-91 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-91 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-91 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-91 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-91 - inet/filter/address-91 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-42 - inet/filter/address-91 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-42 - inet/filter/logpass-42 -m limit --limit 1/second -j LOG - -Filter 249 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-92 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-92 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-92 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-92 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-92 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-92 - inet/filter/address-92 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-92 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/address-92 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-92 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - -Filter 250 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-93 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-93 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-93 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-93 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-93 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-93 - inet/filter/address-93 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-93 -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/address-93 -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/address-93 -s 10.0.0.2 -d 172.16.2.0/16 - -Filter 251 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-94 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-94 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-94 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-94 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-94 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-94 - inet/filter/address-94 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-53 - inet/filter/address-94 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-53 - inet/filter/address-94 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-53 - inet/filter/address-94 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-53 - inet/filter/logaccept-53 -m limit --limit 1/second -j LOG - inet/filter/logaccept-53 -j ACCEPT - -Filter 252 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-95 - inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-95 - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-95 - inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-95 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-95 - inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-95 - inet/filter/address-95 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-43 - inet/filter/address-95 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-43 - inet/filter/address-95 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-43 - inet/filter/address-95 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-43 - inet/filter/logpass-43 -m limit --limit 1/second -j LOG - -Filter 253 {"in":["B","C"],"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT - -Filter 254 {"action":"pass","in":["B","C"],"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 - -Filter 255 {"in":["B","C"],"log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 - inet/filter/logaccept-54 -m limit --limit 1/second -j LOG - inet/filter/logaccept-54 -j ACCEPT - -Filter 256 {"action":"pass","in":["B","C"],"log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 - inet/filter/logpass-44 -m limit --limit 1/second -j LOG - -Filter 257 {"dest":"172.16.0.0\/16","in":["B","C"],"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 - inet/filter/address-96 -d 172.16.0.0/16 -j ACCEPT - -Filter 258 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 - inet/filter/address-97 -d 172.16.0.0/16 - -Filter 259 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 - inet/filter/address-98 -d 172.16.0.0/16 -j logaccept-55 - inet/filter/logaccept-55 -m limit --limit 1/second -j LOG - inet/filter/logaccept-55 -j ACCEPT - -Filter 260 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 - inet/filter/address-99 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG - -Filter 261 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 - inet/filter/address-100 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-100 -d 172.16.2.0/16 -j ACCEPT - -Filter 262 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 - inet/filter/address-101 -d 172.16.0.0/16 - inet/filter/address-101 -d 172.16.2.0/16 - -Filter 263 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 - inet/filter/address-102 -d 172.16.0.0/16 -j logaccept-56 - inet/filter/address-102 -d 172.16.2.0/16 -j logaccept-56 - inet/filter/logaccept-56 -m limit --limit 1/second -j LOG - inet/filter/logaccept-56 -j ACCEPT - -Filter 264 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 - inet/filter/address-103 -d 172.16.0.0/16 -j logpass-45 - inet/filter/address-103 -d 172.16.2.0/16 -j logpass-45 - inet/filter/logpass-45 -m limit --limit 1/second -j LOG - -Filter 265 {"in":["B","C"],"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 - inet/filter/address-104 -s 10.0.0.1 -j ACCEPT - -Filter 266 {"action":"pass","in":["B","C"],"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 - inet/filter/address-105 -s 10.0.0.1 - -Filter 267 {"in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 - inet/filter/address-106 -s 10.0.0.1 -j logaccept-57 - inet/filter/logaccept-57 -m limit --limit 1/second -j LOG - inet/filter/logaccept-57 -j ACCEPT - -Filter 268 {"action":"pass","in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 - inet/filter/address-107 -s 10.0.0.1 -m limit --limit 1/second -j LOG - -Filter 269 {"dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 - inet/filter/address-108 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - -Filter 270 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 - inet/filter/address-109 -s 10.0.0.1 -d 172.16.0.0/16 - -Filter 271 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 - inet/filter/address-110 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-58 - inet/filter/logaccept-58 -m limit --limit 1/second -j LOG - inet/filter/logaccept-58 -j ACCEPT - -Filter 272 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 - inet/filter/address-111 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG - -Filter 273 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 - inet/filter/address-112 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-112 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - -Filter 274 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 - inet/filter/address-113 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-113 -s 10.0.0.1 -d 172.16.2.0/16 - -Filter 275 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 - inet/filter/address-114 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-59 - inet/filter/address-114 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-59 - inet/filter/logaccept-59 -m limit --limit 1/second -j LOG - inet/filter/logaccept-59 -j ACCEPT - -Filter 276 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 - inet/filter/address-115 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-46 - inet/filter/address-115 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-46 - inet/filter/logpass-46 -m limit --limit 1/second -j LOG - -Filter 277 {"in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 - inet/filter/address-116 -s 10.0.0.1 -j ACCEPT - inet/filter/address-116 -s 10.0.0.2 -j ACCEPT - -Filter 278 {"action":"pass","in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 - inet/filter/address-117 -s 10.0.0.1 - inet/filter/address-117 -s 10.0.0.2 - -Filter 279 {"in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 - inet/filter/address-118 -s 10.0.0.1 -j logaccept-60 - inet/filter/address-118 -s 10.0.0.2 -j logaccept-60 - inet/filter/logaccept-60 -m limit --limit 1/second -j LOG - inet/filter/logaccept-60 -j ACCEPT - -Filter 280 {"action":"pass","in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 - inet/filter/address-119 -s 10.0.0.1 -j logpass-47 - inet/filter/address-119 -s 10.0.0.2 -j logpass-47 - inet/filter/logpass-47 -m limit --limit 1/second -j LOG - -Filter 281 {"dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 - inet/filter/address-120 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-120 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - -Filter 282 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 - inet/filter/address-121 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-121 -s 10.0.0.2 -d 172.16.0.0/16 - -Filter 283 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 - inet/filter/address-122 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-61 - inet/filter/address-122 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-61 - inet/filter/logaccept-61 -m limit --limit 1/second -j LOG - inet/filter/logaccept-61 -j ACCEPT - -Filter 284 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 - inet/filter/address-123 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-48 - inet/filter/address-123 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-48 - inet/filter/logpass-48 -m limit --limit 1/second -j LOG - -Filter 285 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 - inet/filter/address-124 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-124 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT - inet/filter/address-124 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT - inet/filter/address-124 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT - -Filter 286 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 - inet/filter/address-125 -s 10.0.0.1 -d 172.16.0.0/16 - inet/filter/address-125 -s 10.0.0.1 -d 172.16.2.0/16 - inet/filter/address-125 -s 10.0.0.2 -d 172.16.0.0/16 - inet/filter/address-125 -s 10.0.0.2 -d 172.16.2.0/16 - -Filter 287 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 - inet/filter/address-126 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-62 - inet/filter/address-126 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-62 - inet/filter/address-126 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-62 - inet/filter/address-126 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-62 - inet/filter/logaccept-62 -m limit --limit 1/second -j LOG - inet/filter/logaccept-62 -j ACCEPT - -Filter 288 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} -(address) - inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 - inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 - inet/filter/address-127 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-49 - inet/filter/address-127 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-49 - inet/filter/address-127 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-49 - inet/filter/address-127 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-49 - inet/filter/logpass-49 -m limit --limit 1/second -j LOG - -Filter 289 {} -(filter) - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 290 {"action":"accept"} -(filter) - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 291 {"action":"drop"} -(filter) - inet/filter/FORWARD -j logdrop-0 - inet6/filter/FORWARD -j logdrop-0 - inet/filter/INPUT -j logdrop-0 - inet6/filter/INPUT -j logdrop-0 - inet/filter/OUTPUT -j logdrop-0 - inet6/filter/OUTPUT -j logdrop-0 - inet/filter/logdrop-0 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-0 -m limit --limit 1/second -j LOG - inet/filter/logdrop-0 -j DROP - inet6/filter/logdrop-0 -j DROP - -Filter 292 {"action":"pass"} -(filter) - inet/filter/FORWARD - inet6/filter/FORWARD - inet/filter/INPUT - inet6/filter/INPUT - inet/filter/OUTPUT - inet6/filter/OUTPUT - -Filter 293 {"action":"reject"} -(filter) - inet/filter/FORWARD -j logreject-0 - inet6/filter/FORWARD -j logreject-0 - inet/filter/INPUT -j logreject-0 - inet6/filter/INPUT -j logreject-0 - inet/filter/OUTPUT -j logreject-0 - inet6/filter/OUTPUT -j logreject-0 - inet/filter/logreject-0 -m limit --limit 1/second -j LOG - inet6/filter/logreject-0 -m limit --limit 1/second -j LOG - inet/filter/logreject-0 -j REJECT - inet6/filter/logreject-0 -j REJECT - -Filter 294 {"action":"tarpit"} -(filter) - inet/filter/FORWARD -j logtarpit-0 - inet6/filter/FORWARD -j logtarpit-0 - inet/filter/INPUT -j logtarpit-0 - inet6/filter/INPUT -j logtarpit-0 - inet/filter/OUTPUT -j logtarpit-0 - inet6/filter/OUTPUT -j logtarpit-0 - inet/filter/logtarpit-0 -m limit --limit 1/second -j LOG - inet6/filter/logtarpit-0 -m limit --limit 1/second -j LOG - inet/filter/logtarpit-0 -j tarpit - inet6/filter/logtarpit-0 -j tarpit - inet/raw/PREROUTING -j CT --notrack - inet6/raw/PREROUTING -j CT --notrack - inet/raw/OUTPUT -j CT --notrack - inet6/raw/OUTPUT -j CT --notrack - -Filter 295 {"conn-limit":1,"out":"B"} +Filter 1 {"conn-limit":1,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-0 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-0 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-0 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-0 - inet/filter/limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1 - inet6/filter/limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1 - inet/filter/logdrop-1 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-1 -m limit --limit 1/second -j LOG - inet/filter/logdrop-1 -j DROP - inet6/filter/logdrop-1 -j DROP + inet/filter/limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-0 + inet6/filter/limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-0 + inet/filter/logdrop-0 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-0 -m limit --limit 1/second -j LOG + inet/filter/logdrop-0 -j DROP + inet6/filter/logdrop-0 -j DROP inet/filter/limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 296 {"action":"pass","conn-limit":1,"out":"B"} +Filter 2 {"action":"pass","conn-limit":1,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-1 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-1 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1 - inet/filter/limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-2 - inet6/filter/limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-2 - inet/filter/logdrop-2 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-2 -m limit --limit 1/second -j LOG - inet/filter/logdrop-2 -j DROP - inet6/filter/logdrop-2 -j DROP + inet/filter/limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1 + inet6/filter/limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1 + inet/filter/logdrop-1 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1 -j DROP + inet6/filter/logdrop-1 -j DROP inet/filter/limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --set inet6/filter/limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 297 {"conn-limit":1,"log":true,"out":"B"} +Filter 3 {"conn-limit":1,"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-2 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-2 - inet/filter/limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 - inet6/filter/limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 - inet/filter/logdrop-3 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-3 -m limit --limit 1/second -j LOG - inet/filter/logdrop-3 -j DROP - inet6/filter/logdrop-3 -j DROP + inet/filter/limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-2 + inet6/filter/limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-2 + inet/filter/logdrop-2 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2 -j DROP + inet6/filter/logdrop-2 -j DROP inet/filter/limit-2 -m limit --limit 1/second -j LOG inet6/filter/limit-2 -m limit --limit 1/second -j LOG inet/filter/limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 298 {"action":"pass","conn-limit":1,"log":true,"out":"B"} +Filter 4 {"action":"pass","conn-limit":1,"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-3 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-3 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-3 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-3 - inet/filter/limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 - inet6/filter/limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 - inet/filter/logdrop-4 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-4 -m limit --limit 1/second -j LOG - inet/filter/logdrop-4 -j DROP - inet6/filter/logdrop-4 -j DROP + inet/filter/limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 + inet6/filter/limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 + inet/filter/logdrop-3 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-3 -m limit --limit 1/second -j LOG + inet/filter/logdrop-3 -j DROP + inet6/filter/logdrop-3 -j DROP inet/filter/limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 299 {"conn-limit":1,"log":"none","out":"B"} +Filter 5 {"conn-limit":1,"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-4 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-4 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-4 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-4 - inet/filter/limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 - inet6/filter/limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 - inet/filter/logdrop-5 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-5 -m limit --limit 1/second -j LOG - inet/filter/logdrop-5 -j DROP - inet6/filter/logdrop-5 -j DROP + inet/filter/limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 + inet6/filter/limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 + inet/filter/logdrop-4 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-4 -m limit --limit 1/second -j LOG + inet/filter/logdrop-4 -j DROP + inet6/filter/logdrop-4 -j DROP inet/filter/limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 300 {"action":"pass","conn-limit":1,"log":"none","out":"B"} +Filter 6 {"action":"pass","conn-limit":1,"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-5 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-5 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-5 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-5 - inet/filter/limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 - inet6/filter/limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 - inet/filter/logdrop-6 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-6 -m limit --limit 1/second -j LOG - inet/filter/logdrop-6 -j DROP - inet6/filter/logdrop-6 -j DROP + inet/filter/limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 + inet6/filter/limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 + inet/filter/logdrop-5 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-5 -m limit --limit 1/second -j LOG + inet/filter/logdrop-5 -j DROP + inet6/filter/logdrop-5 -j DROP inet/filter/limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set inet6/filter/limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 301 {"conn-limit":{},"out":"B"} +Filter 7 {"conn-limit":{},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-6 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-6 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-6 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-6 - inet/filter/limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 - inet6/filter/limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 - inet/filter/logdrop-7 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-7 -m limit --limit 1/second -j LOG - inet/filter/logdrop-7 -j DROP - inet6/filter/logdrop-7 -j DROP + inet/filter/limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 + inet6/filter/limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 + inet/filter/logdrop-6 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-6 -m limit --limit 1/second -j LOG + inet/filter/logdrop-6 -j DROP + inet6/filter/logdrop-6 -j DROP inet/filter/limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 302 {"action":"pass","conn-limit":{},"out":"B"} +Filter 8 {"action":"pass","conn-limit":{},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-7 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-7 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-7 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-7 - inet/filter/limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 - inet6/filter/limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 - inet/filter/logdrop-8 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-8 -m limit --limit 1/second -j LOG - inet/filter/logdrop-8 -j DROP - inet6/filter/logdrop-8 -j DROP + inet/filter/limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 + inet6/filter/limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 + inet/filter/logdrop-7 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-7 -m limit --limit 1/second -j LOG + inet/filter/logdrop-7 -j DROP + inet6/filter/logdrop-7 -j DROP inet/filter/limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set inet6/filter/limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 303 {"conn-limit":{},"log":true,"out":"B"} +Filter 9 {"conn-limit":{},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-8 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-8 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-8 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-8 - inet/filter/limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 - inet6/filter/limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 - inet/filter/logdrop-9 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-9 -m limit --limit 1/second -j LOG - inet/filter/logdrop-9 -j DROP - inet6/filter/logdrop-9 -j DROP + inet/filter/limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 + inet6/filter/limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 + inet/filter/logdrop-8 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-8 -m limit --limit 1/second -j LOG + inet/filter/logdrop-8 -j DROP + inet6/filter/logdrop-8 -j DROP inet/filter/limit-8 -m limit --limit 1/second -j LOG inet6/filter/limit-8 -m limit --limit 1/second -j LOG inet/filter/limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 304 {"action":"pass","conn-limit":{},"log":true,"out":"B"} +Filter 10 {"action":"pass","conn-limit":{},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-9 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-9 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-9 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-9 - inet/filter/limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 - inet6/filter/limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 - inet/filter/logdrop-10 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-10 -m limit --limit 1/second -j LOG - inet/filter/logdrop-10 -j DROP - inet6/filter/logdrop-10 -j DROP + inet/filter/limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 + inet6/filter/limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 + inet/filter/logdrop-9 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-9 -m limit --limit 1/second -j LOG + inet/filter/logdrop-9 -j DROP + inet6/filter/logdrop-9 -j DROP inet/filter/limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 305 {"conn-limit":{},"log":"none","out":"B"} +Filter 11 {"conn-limit":{},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-10 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-10 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-10 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-10 - inet/filter/limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 - inet6/filter/limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 - inet/filter/logdrop-11 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-11 -m limit --limit 1/second -j LOG - inet/filter/logdrop-11 -j DROP - inet6/filter/logdrop-11 -j DROP + inet/filter/limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 + inet6/filter/limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 + inet/filter/logdrop-10 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-10 -m limit --limit 1/second -j LOG + inet/filter/logdrop-10 -j DROP + inet6/filter/logdrop-10 -j DROP inet/filter/limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 306 {"action":"pass","conn-limit":{},"log":"none","out":"B"} +Filter 12 {"action":"pass","conn-limit":{},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-11 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-11 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-11 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-11 - inet/filter/limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 - inet6/filter/limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 - inet/filter/logdrop-12 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-12 -m limit --limit 1/second -j LOG - inet/filter/logdrop-12 -j DROP - inet6/filter/logdrop-12 -j DROP + inet/filter/limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 + inet6/filter/limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 + inet/filter/logdrop-11 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-11 -m limit --limit 1/second -j LOG + inet/filter/logdrop-11 -j DROP + inet6/filter/logdrop-11 -j DROP inet/filter/limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set inet6/filter/limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 307 {"conn-limit":{"name":"A"},"out":"B"} +Filter 13 {"conn-limit":{"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-12 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-12 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-12 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-12 - inet/filter/limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 - inet6/filter/limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 - inet/filter/logdrop-13 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-13 -m limit --limit 1/second -j LOG - inet/filter/logdrop-13 -j DROP - inet6/filter/logdrop-13 -j DROP + inet/filter/limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 + inet6/filter/limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 + inet/filter/logdrop-12 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-12 -m limit --limit 1/second -j LOG + inet/filter/logdrop-12 -j DROP + inet6/filter/logdrop-12 -j DROP inet/filter/limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 308 {"action":"pass","conn-limit":{"name":"A"},"out":"B"} +Filter 14 {"action":"pass","conn-limit":{"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-13 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-13 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-13 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-13 - inet/filter/limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 - inet6/filter/limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 - inet/filter/logdrop-14 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-14 -m limit --limit 1/second -j LOG - inet/filter/logdrop-14 -j DROP - inet6/filter/logdrop-14 -j DROP + inet/filter/limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 + inet6/filter/limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 + inet/filter/logdrop-13 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-13 -m limit --limit 1/second -j LOG + inet/filter/logdrop-13 -j DROP + inet6/filter/logdrop-13 -j DROP inet/filter/limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 309 {"conn-limit":{"name":"A"},"log":true,"out":"B"} +Filter 15 {"conn-limit":{"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-14 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-14 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-14 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-14 - inet/filter/limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 - inet6/filter/limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 - inet/filter/logdrop-15 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-15 -m limit --limit 1/second -j LOG - inet/filter/logdrop-15 -j DROP - inet6/filter/logdrop-15 -j DROP + inet/filter/limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 + inet6/filter/limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 + inet/filter/logdrop-14 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-14 -m limit --limit 1/second -j LOG + inet/filter/logdrop-14 -j DROP + inet6/filter/logdrop-14 -j DROP inet/filter/limit-14 -m limit --limit 1/second -j LOG inet6/filter/limit-14 -m limit --limit 1/second -j LOG inet/filter/limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 310 {"action":"pass","conn-limit":{"name":"A"},"log":true,"out":"B"} +Filter 16 {"action":"pass","conn-limit":{"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-15 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-15 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-15 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-15 - inet/filter/limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 - inet6/filter/limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 - inet/filter/logdrop-16 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-16 -m limit --limit 1/second -j LOG - inet/filter/logdrop-16 -j DROP - inet6/filter/logdrop-16 -j DROP + inet/filter/limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 + inet6/filter/limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 + inet/filter/logdrop-15 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-15 -m limit --limit 1/second -j LOG + inet/filter/logdrop-15 -j DROP + inet6/filter/logdrop-15 -j DROP inet/filter/limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 311 {"conn-limit":{"name":"A"},"log":"none","out":"B"} +Filter 17 {"conn-limit":{"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-16 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-16 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-16 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-16 - inet/filter/limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 - inet6/filter/limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 - inet/filter/logdrop-17 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-17 -m limit --limit 1/second -j LOG - inet/filter/logdrop-17 -j DROP - inet6/filter/logdrop-17 -j DROP + inet/filter/limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 + inet6/filter/limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 + inet/filter/logdrop-16 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-16 -m limit --limit 1/second -j LOG + inet/filter/logdrop-16 -j DROP + inet6/filter/logdrop-16 -j DROP inet/filter/limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 312 {"action":"pass","conn-limit":{"name":"A"},"log":"none","out":"B"} +Filter 18 {"action":"pass","conn-limit":{"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-17 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-17 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-17 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-17 - inet/filter/limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-18 - inet6/filter/limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-18 - inet/filter/logdrop-18 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-18 -m limit --limit 1/second -j LOG - inet/filter/logdrop-18 -j DROP - inet6/filter/logdrop-18 -j DROP + inet/filter/limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 + inet6/filter/limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 + inet/filter/logdrop-17 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-17 -m limit --limit 1/second -j LOG + inet/filter/logdrop-17 -j DROP + inet6/filter/logdrop-17 -j DROP inet/filter/limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 313 {"conn-limit":{"name":"A","update":false},"out":"B"} +Filter 19 {"conn-limit":{"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-18 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-18 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-18 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-18 - inet/filter/limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-19 - inet6/filter/limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-19 - inet/filter/logdrop-19 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-19 -m limit --limit 1/second -j LOG - inet/filter/logdrop-19 -j DROP - inet6/filter/logdrop-19 -j DROP + inet/filter/limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-18 + inet6/filter/limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-18 + inet/filter/logdrop-18 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-18 -m limit --limit 1/second -j LOG + inet/filter/logdrop-18 -j DROP + inet6/filter/logdrop-18 -j DROP inet/filter/limit-18 -j ACCEPT inet6/filter/limit-18 -j ACCEPT -Filter 314 {"action":"pass","conn-limit":{"name":"A","update":false},"out":"B"} +Filter 20 {"action":"pass","conn-limit":{"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-19 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-19 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-19 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-19 - inet/filter/limit-19 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-20 - inet6/filter/limit-19 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-20 - inet/filter/logdrop-20 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-20 -m limit --limit 1/second -j LOG - inet/filter/logdrop-20 -j DROP - inet6/filter/logdrop-20 -j DROP + inet/filter/limit-19 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-19 + inet6/filter/limit-19 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-19 + inet/filter/logdrop-19 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-19 -m limit --limit 1/second -j LOG + inet/filter/logdrop-19 -j DROP + inet6/filter/logdrop-19 -j DROP -Filter 315 {"conn-limit":{"name":"A","update":false},"log":true,"out":"B"} +Filter 21 {"conn-limit":{"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-20 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-20 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-20 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-20 - inet/filter/limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-21 - inet6/filter/limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-21 - inet/filter/logdrop-21 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-21 -m limit --limit 1/second -j LOG - inet/filter/logdrop-21 -j DROP - inet6/filter/logdrop-21 -j DROP + inet/filter/limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-20 + inet6/filter/limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-20 + inet/filter/logdrop-20 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-20 -m limit --limit 1/second -j LOG + inet/filter/logdrop-20 -j DROP + inet6/filter/logdrop-20 -j DROP inet/filter/limit-20 -m limit --limit 1/second -j LOG inet6/filter/limit-20 -m limit --limit 1/second -j LOG inet/filter/limit-20 -j ACCEPT inet6/filter/limit-20 -j ACCEPT -Filter 316 {"action":"pass","conn-limit":{"name":"A","update":false},"log":true,"out":"B"} +Filter 22 {"action":"pass","conn-limit":{"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-21 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-21 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-21 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-21 - inet/filter/limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-22 - inet6/filter/limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-22 - inet/filter/logdrop-22 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-22 -m limit --limit 1/second -j LOG - inet/filter/logdrop-22 -j DROP - inet6/filter/logdrop-22 -j DROP + inet/filter/limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-21 + inet6/filter/limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-21 + inet/filter/logdrop-21 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-21 -m limit --limit 1/second -j LOG + inet/filter/logdrop-21 -j DROP + inet6/filter/logdrop-21 -j DROP inet/filter/limit-21 -m limit --limit 1/second -j LOG inet6/filter/limit-21 -m limit --limit 1/second -j LOG -Filter 317 {"conn-limit":{"name":"A","update":false},"log":"none","out":"B"} +Filter 23 {"conn-limit":{"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-22 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-22 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-22 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-22 - inet/filter/limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-23 - inet6/filter/limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-23 - inet/filter/logdrop-23 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-23 -m limit --limit 1/second -j LOG - inet/filter/logdrop-23 -j DROP - inet6/filter/logdrop-23 -j DROP + inet/filter/limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-22 + inet6/filter/limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-22 + inet/filter/logdrop-22 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-22 -m limit --limit 1/second -j LOG + inet/filter/logdrop-22 -j DROP + inet6/filter/logdrop-22 -j DROP inet/filter/limit-22 -j ACCEPT inet6/filter/limit-22 -j ACCEPT -Filter 318 {"action":"pass","conn-limit":{"name":"A","update":false},"log":"none","out":"B"} +Filter 24 {"action":"pass","conn-limit":{"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-23 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-23 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-23 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-23 - inet/filter/limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-24 - inet6/filter/limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-24 - inet/filter/logdrop-24 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-24 -m limit --limit 1/second -j LOG - inet/filter/logdrop-24 -j DROP - inet6/filter/logdrop-24 -j DROP + inet/filter/limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-23 + inet6/filter/limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-23 + inet/filter/logdrop-23 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-23 -m limit --limit 1/second -j LOG + inet/filter/logdrop-23 -j DROP + inet6/filter/logdrop-23 -j DROP -Filter 319 {"conn-limit":{"addr":"dest","name":"A"},"out":"B"} +Filter 25 {"conn-limit":{"addr":"dest","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-24 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-24 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-24 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-24 - inet/filter/limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 - inet6/filter/limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 - inet/filter/logdrop-25 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-25 -m limit --limit 1/second -j LOG - inet/filter/logdrop-25 -j DROP - inet6/filter/logdrop-25 -j DROP + inet/filter/limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-24 + inet6/filter/limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-24 + inet/filter/logdrop-24 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-24 -m limit --limit 1/second -j LOG + inet/filter/logdrop-24 -j DROP + inet6/filter/logdrop-24 -j DROP inet/filter/limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 320 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"out":"B"} +Filter 26 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-25 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-25 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-25 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-25 - inet/filter/limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 - inet6/filter/limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 - inet/filter/logdrop-26 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-26 -m limit --limit 1/second -j LOG - inet/filter/logdrop-26 -j DROP - inet6/filter/logdrop-26 -j DROP + inet/filter/limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 + inet6/filter/limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 + inet/filter/logdrop-25 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-25 -m limit --limit 1/second -j LOG + inet/filter/logdrop-25 -j DROP + inet6/filter/logdrop-25 -j DROP inet/filter/limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 321 {"conn-limit":{"addr":"dest","name":"A"},"log":true,"out":"B"} +Filter 27 {"conn-limit":{"addr":"dest","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-26 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-26 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-26 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-26 - inet/filter/limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 - inet6/filter/limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 - inet/filter/logdrop-27 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-27 -m limit --limit 1/second -j LOG - inet/filter/logdrop-27 -j DROP - inet6/filter/logdrop-27 -j DROP + inet/filter/limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 + inet6/filter/limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 + inet/filter/logdrop-26 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-26 -m limit --limit 1/second -j LOG + inet/filter/logdrop-26 -j DROP + inet6/filter/logdrop-26 -j DROP inet/filter/limit-26 -m limit --limit 1/second -j LOG inet6/filter/limit-26 -m limit --limit 1/second -j LOG inet/filter/limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 322 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":true,"out":"B"} +Filter 28 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-27 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-27 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-27 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-27 - inet/filter/limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 - inet6/filter/limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 - inet/filter/logdrop-28 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-28 -m limit --limit 1/second -j LOG - inet/filter/logdrop-28 -j DROP - inet6/filter/logdrop-28 -j DROP + inet/filter/limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 + inet6/filter/limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 + inet/filter/logdrop-27 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-27 -m limit --limit 1/second -j LOG + inet/filter/logdrop-27 -j DROP + inet6/filter/logdrop-27 -j DROP inet/filter/limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 323 {"conn-limit":{"addr":"dest","name":"A"},"log":"none","out":"B"} +Filter 29 {"conn-limit":{"addr":"dest","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-28 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-28 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-28 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-28 - inet/filter/limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 - inet6/filter/limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 - inet/filter/logdrop-29 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-29 -m limit --limit 1/second -j LOG - inet/filter/logdrop-29 -j DROP - inet6/filter/logdrop-29 -j DROP + inet/filter/limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 + inet6/filter/limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 + inet/filter/logdrop-28 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-28 -m limit --limit 1/second -j LOG + inet/filter/logdrop-28 -j DROP + inet6/filter/logdrop-28 -j DROP inet/filter/limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 324 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":"none","out":"B"} +Filter 30 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-29 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-29 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-29 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-29 - inet/filter/limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-30 - inet6/filter/limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-30 - inet/filter/logdrop-30 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-30 -m limit --limit 1/second -j LOG - inet/filter/logdrop-30 -j DROP - inet6/filter/logdrop-30 -j DROP + inet/filter/limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 + inet6/filter/limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 + inet/filter/logdrop-29 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-29 -m limit --limit 1/second -j LOG + inet/filter/logdrop-29 -j DROP + inet6/filter/logdrop-29 -j DROP inet/filter/limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 325 {"conn-limit":{"addr":"dest","name":"A","update":false},"out":"B"} +Filter 31 {"conn-limit":{"addr":"dest","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-30 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-30 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-30 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-30 - inet/filter/limit-30 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 - inet6/filter/limit-30 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 - inet/filter/logdrop-31 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-31 -m limit --limit 1/second -j LOG - inet/filter/logdrop-31 -j DROP - inet6/filter/logdrop-31 -j DROP + inet/filter/limit-30 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-30 + inet6/filter/limit-30 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-30 + inet/filter/logdrop-30 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-30 -m limit --limit 1/second -j LOG + inet/filter/logdrop-30 -j DROP + inet6/filter/logdrop-30 -j DROP inet/filter/limit-30 -j ACCEPT inet6/filter/limit-30 -j ACCEPT -Filter 326 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"out":"B"} +Filter 32 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-31 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-31 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-31 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-31 - inet/filter/limit-31 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 - inet6/filter/limit-31 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 - inet/filter/logdrop-32 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-32 -m limit --limit 1/second -j LOG - inet/filter/logdrop-32 -j DROP - inet6/filter/logdrop-32 -j DROP + inet/filter/limit-31 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 + inet6/filter/limit-31 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 + inet/filter/logdrop-31 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-31 -m limit --limit 1/second -j LOG + inet/filter/logdrop-31 -j DROP + inet6/filter/logdrop-31 -j DROP -Filter 327 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"} +Filter 33 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-32 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-32 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-32 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-32 - inet/filter/limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 - inet6/filter/limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 - inet/filter/logdrop-33 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-33 -m limit --limit 1/second -j LOG - inet/filter/logdrop-33 -j DROP - inet6/filter/logdrop-33 -j DROP + inet/filter/limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 + inet6/filter/limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 + inet/filter/logdrop-32 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-32 -m limit --limit 1/second -j LOG + inet/filter/logdrop-32 -j DROP + inet6/filter/logdrop-32 -j DROP inet/filter/limit-32 -m limit --limit 1/second -j LOG inet6/filter/limit-32 -m limit --limit 1/second -j LOG inet/filter/limit-32 -j ACCEPT inet6/filter/limit-32 -j ACCEPT -Filter 328 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"} +Filter 34 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-33 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-33 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-33 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-33 - inet/filter/limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 - inet6/filter/limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 - inet/filter/logdrop-34 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-34 -m limit --limit 1/second -j LOG - inet/filter/logdrop-34 -j DROP - inet6/filter/logdrop-34 -j DROP + inet/filter/limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 + inet6/filter/limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 + inet/filter/logdrop-33 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-33 -m limit --limit 1/second -j LOG + inet/filter/logdrop-33 -j DROP + inet6/filter/logdrop-33 -j DROP inet/filter/limit-33 -m limit --limit 1/second -j LOG inet6/filter/limit-33 -m limit --limit 1/second -j LOG -Filter 329 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":"none","out":"B"} +Filter 35 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-34 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-34 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-34 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-34 - inet/filter/limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 - inet6/filter/limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 - inet/filter/logdrop-35 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-35 -m limit --limit 1/second -j LOG - inet/filter/logdrop-35 -j DROP - inet6/filter/logdrop-35 -j DROP + inet/filter/limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 + inet6/filter/limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 + inet/filter/logdrop-34 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-34 -m limit --limit 1/second -j LOG + inet/filter/logdrop-34 -j DROP + inet6/filter/logdrop-34 -j DROP inet/filter/limit-34 -j ACCEPT inet6/filter/limit-34 -j ACCEPT -Filter 330 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":"none","out":"B"} +Filter 36 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-35 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-35 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-35 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-35 - inet/filter/limit-35 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-36 - inet6/filter/limit-35 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36 - inet/filter/logdrop-36 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-36 -m limit --limit 1/second -j LOG - inet/filter/logdrop-36 -j DROP - inet6/filter/logdrop-36 -j DROP + inet/filter/limit-35 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 + inet6/filter/limit-35 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 + inet/filter/logdrop-35 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-35 -m limit --limit 1/second -j LOG + inet/filter/logdrop-35 -j DROP + inet6/filter/logdrop-35 -j DROP -Filter 331 {"conn-limit":{"name":"C"},"out":"B"} +Filter 37 {"conn-limit":{"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-36 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-36 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-36 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-36 - inet/filter/limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-37 - inet6/filter/limit-36 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-37 - inet/filter/logdrop-37 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-37 -m limit --limit 1/second -j LOG - inet/filter/logdrop-37 -j DROP - inet6/filter/logdrop-37 -j DROP + inet/filter/limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-36 + inet6/filter/limit-36 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-36 + inet/filter/logdrop-36 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-36 -m limit --limit 1/second -j LOG + inet/filter/logdrop-36 -j DROP + inet6/filter/logdrop-36 -j DROP inet/filter/limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-36 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 332 {"action":"pass","conn-limit":{"name":"C"},"out":"B"} +Filter 38 {"action":"pass","conn-limit":{"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-37 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-37 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-37 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-37 - inet/filter/limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-38 - inet6/filter/limit-37 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-38 - inet/filter/logdrop-38 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-38 -m limit --limit 1/second -j LOG - inet/filter/logdrop-38 -j DROP - inet6/filter/logdrop-38 -j DROP + inet/filter/limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-37 + inet6/filter/limit-37 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-37 + inet/filter/logdrop-37 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-37 -m limit --limit 1/second -j LOG + inet/filter/logdrop-37 -j DROP + inet6/filter/logdrop-37 -j DROP inet/filter/limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-37 -m recent --name user:C --rsource --mask fe00:: --set -Filter 333 {"conn-limit":{"name":"C"},"log":true,"out":"B"} +Filter 39 {"conn-limit":{"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-38 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-38 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-38 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-38 - inet/filter/limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-39 - inet6/filter/limit-38 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-39 - inet/filter/logdrop-39 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-39 -m limit --limit 1/second -j LOG - inet/filter/logdrop-39 -j DROP - inet6/filter/logdrop-39 -j DROP + inet/filter/limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-38 + inet6/filter/limit-38 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-38 + inet/filter/logdrop-38 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-38 -m limit --limit 1/second -j LOG + inet/filter/logdrop-38 -j DROP + inet6/filter/logdrop-38 -j DROP inet/filter/limit-38 -m limit --limit 1/second -j LOG inet6/filter/limit-38 -m limit --limit 1/second -j LOG inet/filter/limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-38 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 334 {"action":"pass","conn-limit":{"name":"C"},"log":true,"out":"B"} +Filter 40 {"action":"pass","conn-limit":{"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-39 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-39 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-39 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-39 - inet/filter/limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-40 - inet6/filter/limit-39 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-40 - inet/filter/logdrop-40 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-40 -m limit --limit 1/second -j LOG - inet/filter/logdrop-40 -j DROP - inet6/filter/logdrop-40 -j DROP + inet/filter/limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-39 + inet6/filter/limit-39 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-39 + inet/filter/logdrop-39 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-39 -m limit --limit 1/second -j LOG + inet/filter/logdrop-39 -j DROP + inet6/filter/logdrop-39 -j DROP inet/filter/limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-39 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 335 {"conn-limit":{"name":"C"},"log":"none","out":"B"} +Filter 41 {"conn-limit":{"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-40 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-40 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-40 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-40 - inet/filter/limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-41 - inet6/filter/limit-40 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-41 - inet/filter/logdrop-41 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-41 -m limit --limit 1/second -j LOG - inet/filter/logdrop-41 -j DROP - inet6/filter/logdrop-41 -j DROP + inet/filter/limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-40 + inet6/filter/limit-40 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-40 + inet/filter/logdrop-40 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-40 -m limit --limit 1/second -j LOG + inet/filter/logdrop-40 -j DROP + inet6/filter/logdrop-40 -j DROP inet/filter/limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-40 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 336 {"action":"pass","conn-limit":{"name":"C"},"log":"none","out":"B"} +Filter 42 {"action":"pass","conn-limit":{"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-41 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-41 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-41 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-41 - inet/filter/limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-42 - inet6/filter/limit-41 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-42 - inet/filter/logdrop-42 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-42 -m limit --limit 1/second -j LOG - inet/filter/logdrop-42 -j DROP - inet6/filter/logdrop-42 -j DROP + inet/filter/limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-41 + inet6/filter/limit-41 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-41 + inet/filter/logdrop-41 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-41 -m limit --limit 1/second -j LOG + inet/filter/logdrop-41 -j DROP + inet6/filter/logdrop-41 -j DROP inet/filter/limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-41 -m recent --name user:C --rsource --mask fe00:: --set -Filter 337 {"conn-limit":{"name":"C","update":false},"out":"B"} +Filter 43 {"conn-limit":{"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-42 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-42 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-42 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-42 - inet/filter/limit-42 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 - inet6/filter/limit-42 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-43 - inet/filter/logdrop-43 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-43 -m limit --limit 1/second -j LOG - inet/filter/logdrop-43 -j DROP - inet6/filter/logdrop-43 -j DROP + inet/filter/limit-42 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-42 + inet6/filter/limit-42 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-42 + inet/filter/logdrop-42 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-42 -m limit --limit 1/second -j LOG + inet/filter/logdrop-42 -j DROP + inet6/filter/logdrop-42 -j DROP inet/filter/limit-42 -j ACCEPT inet6/filter/limit-42 -j ACCEPT -Filter 338 {"action":"pass","conn-limit":{"name":"C","update":false},"out":"B"} +Filter 44 {"action":"pass","conn-limit":{"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-43 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-43 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-43 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-43 - inet/filter/limit-43 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 - inet6/filter/limit-43 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 - inet/filter/logdrop-44 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-44 -m limit --limit 1/second -j LOG - inet/filter/logdrop-44 -j DROP - inet6/filter/logdrop-44 -j DROP + inet/filter/limit-43 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 + inet6/filter/limit-43 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-43 + inet/filter/logdrop-43 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-43 -m limit --limit 1/second -j LOG + inet/filter/logdrop-43 -j DROP + inet6/filter/logdrop-43 -j DROP -Filter 339 {"conn-limit":{"name":"C","update":false},"log":true,"out":"B"} +Filter 45 {"conn-limit":{"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-44 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-44 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-44 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-44 - inet/filter/limit-44 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 - inet6/filter/limit-44 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-45 - inet/filter/logdrop-45 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-45 -m limit --limit 1/second -j LOG - inet/filter/logdrop-45 -j DROP - inet6/filter/logdrop-45 -j DROP + inet/filter/limit-44 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 + inet6/filter/limit-44 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 + inet/filter/logdrop-44 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-44 -m limit --limit 1/second -j LOG + inet/filter/logdrop-44 -j DROP + inet6/filter/logdrop-44 -j DROP inet/filter/limit-44 -m limit --limit 1/second -j LOG inet6/filter/limit-44 -m limit --limit 1/second -j LOG inet/filter/limit-44 -j ACCEPT inet6/filter/limit-44 -j ACCEPT -Filter 340 {"action":"pass","conn-limit":{"name":"C","update":false},"log":true,"out":"B"} +Filter 46 {"action":"pass","conn-limit":{"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-45 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-45 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-45 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-45 - inet/filter/limit-45 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 - inet6/filter/limit-45 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-46 - inet/filter/logdrop-46 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-46 -m limit --limit 1/second -j LOG - inet/filter/logdrop-46 -j DROP - inet6/filter/logdrop-46 -j DROP + inet/filter/limit-45 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 + inet6/filter/limit-45 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-45 + inet/filter/logdrop-45 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-45 -m limit --limit 1/second -j LOG + inet/filter/logdrop-45 -j DROP + inet6/filter/logdrop-45 -j DROP inet/filter/limit-45 -m limit --limit 1/second -j LOG inet6/filter/limit-45 -m limit --limit 1/second -j LOG -Filter 341 {"conn-limit":{"name":"C","update":false},"log":"none","out":"B"} +Filter 47 {"conn-limit":{"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-46 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-46 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-46 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-46 - inet/filter/limit-46 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 - inet6/filter/limit-46 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-47 - inet/filter/logdrop-47 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-47 -m limit --limit 1/second -j LOG - inet/filter/logdrop-47 -j DROP - inet6/filter/logdrop-47 -j DROP + inet/filter/limit-46 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 + inet6/filter/limit-46 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-46 + inet/filter/logdrop-46 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-46 -m limit --limit 1/second -j LOG + inet/filter/logdrop-46 -j DROP + inet6/filter/logdrop-46 -j DROP inet/filter/limit-46 -j ACCEPT inet6/filter/limit-46 -j ACCEPT -Filter 342 {"action":"pass","conn-limit":{"name":"C","update":false},"log":"none","out":"B"} +Filter 48 {"action":"pass","conn-limit":{"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-47 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-47 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-47 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-47 - inet/filter/limit-47 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-48 - inet6/filter/limit-47 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-48 - inet/filter/logdrop-48 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-48 -m limit --limit 1/second -j LOG - inet/filter/logdrop-48 -j DROP - inet6/filter/logdrop-48 -j DROP + inet/filter/limit-47 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 + inet6/filter/limit-47 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-47 + inet/filter/logdrop-47 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-47 -m limit --limit 1/second -j LOG + inet/filter/logdrop-47 -j DROP + inet6/filter/logdrop-47 -j DROP -Filter 343 {"conn-limit":{"addr":"dest","name":"C"},"out":"B"} +Filter 49 {"conn-limit":{"addr":"dest","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-48 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-48 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-48 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-48 - inet/filter/limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 - inet6/filter/limit-48 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 - inet/filter/logdrop-49 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-49 -m limit --limit 1/second -j LOG - inet/filter/logdrop-49 -j DROP - inet6/filter/logdrop-49 -j DROP + inet/filter/limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-48 + inet6/filter/limit-48 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-48 + inet/filter/logdrop-48 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-48 -m limit --limit 1/second -j LOG + inet/filter/logdrop-48 -j DROP + inet6/filter/logdrop-48 -j DROP inet/filter/limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-48 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 344 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"out":"B"} +Filter 50 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-49 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-49 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-49 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-49 - inet/filter/limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 - inet6/filter/limit-49 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 - inet/filter/logdrop-50 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-50 -m limit --limit 1/second -j LOG - inet/filter/logdrop-50 -j DROP - inet6/filter/logdrop-50 -j DROP + inet/filter/limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 + inet6/filter/limit-49 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 + inet/filter/logdrop-49 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-49 -m limit --limit 1/second -j LOG + inet/filter/logdrop-49 -j DROP + inet6/filter/logdrop-49 -j DROP inet/filter/limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-49 -m recent --name user:C --rdest --mask fe00:: --set -Filter 345 {"conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} +Filter 51 {"conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-50 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-50 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-50 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-50 - inet/filter/limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 - inet6/filter/limit-50 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 - inet/filter/logdrop-51 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-51 -m limit --limit 1/second -j LOG - inet/filter/logdrop-51 -j DROP - inet6/filter/logdrop-51 -j DROP + inet/filter/limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 + inet6/filter/limit-50 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 + inet/filter/logdrop-50 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-50 -m limit --limit 1/second -j LOG + inet/filter/logdrop-50 -j DROP + inet6/filter/logdrop-50 -j DROP inet/filter/limit-50 -m limit --limit 1/second -j LOG inet6/filter/limit-50 -m limit --limit 1/second -j LOG inet/filter/limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-50 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 346 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} +Filter 52 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-51 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-51 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-51 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-51 - inet/filter/limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 - inet6/filter/limit-51 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 - inet/filter/logdrop-52 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-52 -m limit --limit 1/second -j LOG - inet/filter/logdrop-52 -j DROP - inet6/filter/logdrop-52 -j DROP + inet/filter/limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 + inet6/filter/limit-51 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 + inet/filter/logdrop-51 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-51 -m limit --limit 1/second -j LOG + inet/filter/logdrop-51 -j DROP + inet6/filter/logdrop-51 -j DROP inet/filter/limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-51 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 347 {"conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} +Filter 53 {"conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-52 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-52 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-52 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-52 - inet/filter/limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 - inet6/filter/limit-52 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 - inet/filter/logdrop-53 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-53 -m limit --limit 1/second -j LOG - inet/filter/logdrop-53 -j DROP - inet6/filter/logdrop-53 -j DROP + inet/filter/limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 + inet6/filter/limit-52 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 + inet/filter/logdrop-52 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-52 -m limit --limit 1/second -j LOG + inet/filter/logdrop-52 -j DROP + inet6/filter/logdrop-52 -j DROP inet/filter/limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-52 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 348 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} +Filter 54 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-53 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-53 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-53 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-53 - inet/filter/limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-54 - inet6/filter/limit-53 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-54 - inet/filter/logdrop-54 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-54 -m limit --limit 1/second -j LOG - inet/filter/logdrop-54 -j DROP - inet6/filter/logdrop-54 -j DROP + inet/filter/limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 + inet6/filter/limit-53 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 + inet/filter/logdrop-53 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-53 -m limit --limit 1/second -j LOG + inet/filter/logdrop-53 -j DROP + inet6/filter/logdrop-53 -j DROP inet/filter/limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-53 -m recent --name user:C --rdest --mask fe00:: --set -Filter 349 {"conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} +Filter 55 {"conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-54 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-54 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-54 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-54 - inet/filter/limit-54 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 - inet6/filter/limit-54 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-55 - inet/filter/logdrop-55 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-55 -m limit --limit 1/second -j LOG - inet/filter/logdrop-55 -j DROP - inet6/filter/logdrop-55 -j DROP + inet/filter/limit-54 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-54 + inet6/filter/limit-54 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-54 + inet/filter/logdrop-54 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-54 -m limit --limit 1/second -j LOG + inet/filter/logdrop-54 -j DROP + inet6/filter/logdrop-54 -j DROP inet/filter/limit-54 -j ACCEPT inet6/filter/limit-54 -j ACCEPT -Filter 350 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} +Filter 56 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-55 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-55 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-55 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-55 - inet/filter/limit-55 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 - inet6/filter/limit-55 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 - inet/filter/logdrop-56 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-56 -m limit --limit 1/second -j LOG - inet/filter/logdrop-56 -j DROP - inet6/filter/logdrop-56 -j DROP + inet/filter/limit-55 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 + inet6/filter/limit-55 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-55 + inet/filter/logdrop-55 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-55 -m limit --limit 1/second -j LOG + inet/filter/logdrop-55 -j DROP + inet6/filter/logdrop-55 -j DROP -Filter 351 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} +Filter 57 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-56 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-56 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-56 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-56 - inet/filter/limit-56 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 - inet6/filter/limit-56 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 - inet/filter/logdrop-57 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-57 -m limit --limit 1/second -j LOG - inet/filter/logdrop-57 -j DROP - inet6/filter/logdrop-57 -j DROP + inet/filter/limit-56 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 + inet6/filter/limit-56 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 + inet/filter/logdrop-56 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-56 -m limit --limit 1/second -j LOG + inet/filter/logdrop-56 -j DROP + inet6/filter/logdrop-56 -j DROP inet/filter/limit-56 -m limit --limit 1/second -j LOG inet6/filter/limit-56 -m limit --limit 1/second -j LOG inet/filter/limit-56 -j ACCEPT inet6/filter/limit-56 -j ACCEPT -Filter 352 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} +Filter 58 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-57 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-57 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-57 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-57 - inet/filter/limit-57 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 - inet6/filter/limit-57 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 - inet/filter/logdrop-58 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-58 -m limit --limit 1/second -j LOG - inet/filter/logdrop-58 -j DROP - inet6/filter/logdrop-58 -j DROP + inet/filter/limit-57 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 + inet6/filter/limit-57 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 + inet/filter/logdrop-57 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-57 -m limit --limit 1/second -j LOG + inet/filter/logdrop-57 -j DROP + inet6/filter/logdrop-57 -j DROP inet/filter/limit-57 -m limit --limit 1/second -j LOG inet6/filter/limit-57 -m limit --limit 1/second -j LOG -Filter 353 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} +Filter 59 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-58 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-58 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-58 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-58 - inet/filter/limit-58 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 - inet6/filter/limit-58 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 - inet/filter/logdrop-59 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-59 -m limit --limit 1/second -j LOG - inet/filter/logdrop-59 -j DROP - inet6/filter/logdrop-59 -j DROP + inet/filter/limit-58 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 + inet6/filter/limit-58 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 + inet/filter/logdrop-58 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-58 -m limit --limit 1/second -j LOG + inet/filter/logdrop-58 -j DROP + inet6/filter/logdrop-58 -j DROP inet/filter/limit-58 -j ACCEPT inet6/filter/limit-58 -j ACCEPT -Filter 354 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} +Filter 60 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-59 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-59 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-59 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-59 - inet/filter/limit-59 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 - inet6/filter/limit-59 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60 - inet/filter/logdrop-60 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-60 -m limit --limit 1/second -j LOG - inet/filter/logdrop-60 -j DROP - inet6/filter/logdrop-60 -j DROP + inet/filter/limit-59 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 + inet6/filter/limit-59 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 + inet/filter/logdrop-59 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-59 -m limit --limit 1/second -j LOG + inet/filter/logdrop-59 -j DROP + inet6/filter/logdrop-59 -j DROP -Filter 355 {"conn-limit":{"log":false},"out":"B"} +Filter 61 {"conn-limit":{"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-60 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-60 @@ -3182,7 +923,7 @@ Filter 355 {"conn-limit":{"log":false},"out":"B"} inet/filter/limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 356 {"action":"pass","conn-limit":{"log":false},"out":"B"} +Filter 62 {"action":"pass","conn-limit":{"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-61 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-61 @@ -3193,7 +934,7 @@ Filter 356 {"action":"pass","conn-limit":{"log":false}," inet/filter/limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --set inet6/filter/limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 357 {"conn-limit":{"log":false},"log":true,"out":"B"} +Filter 63 {"conn-limit":{"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-62 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-62 @@ -3206,7 +947,7 @@ Filter 357 {"conn-limit":{"log":false},"log":true,"out": inet/filter/limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 358 {"action":"pass","conn-limit":{"log":false},"log":true,"out":"B"} +Filter 64 {"action":"pass","conn-limit":{"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-63 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-63 @@ -3217,7 +958,7 @@ Filter 358 {"action":"pass","conn-limit":{"log":false}," inet/filter/limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 359 {"conn-limit":{"log":false},"log":"none","out":"B"} +Filter 65 {"conn-limit":{"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-64 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-64 @@ -3228,7 +969,7 @@ Filter 359 {"conn-limit":{"log":false},"log":"none","out inet/filter/limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 360 {"action":"pass","conn-limit":{"log":false},"log":"none","out":"B"} +Filter 66 {"action":"pass","conn-limit":{"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-65 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-65 @@ -3239,7 +980,7 @@ Filter 360 {"action":"pass","conn-limit":{"log":false}," inet/filter/limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --set inet6/filter/limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 361 {"conn-limit":{"log":false,"name":"A"},"out":"B"} +Filter 67 {"conn-limit":{"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-66 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-66 @@ -3250,7 +991,7 @@ Filter 361 {"conn-limit":{"log":false,"name":"A"},"out": inet/filter/limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 362 {"action":"pass","conn-limit":{"log":false,"name":"A"},"out":"B"} +Filter 68 {"action":"pass","conn-limit":{"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-67 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-67 @@ -3261,7 +1002,7 @@ Filter 362 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 363 {"conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} +Filter 69 {"conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-68 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-68 @@ -3274,7 +1015,7 @@ Filter 363 {"conn-limit":{"log":false,"name":"A"},"log": inet/filter/limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 364 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} +Filter 70 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-69 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-69 @@ -3285,7 +1026,7 @@ Filter 364 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 365 {"conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} +Filter 71 {"conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-70 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-70 @@ -3296,7 +1037,7 @@ Filter 365 {"conn-limit":{"log":false,"name":"A"},"log": inet/filter/limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 366 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} +Filter 72 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-71 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-71 @@ -3307,7 +1048,7 @@ Filter 366 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 367 {"conn-limit":{"log":false,"name":"A","update":false},"out":"B"} +Filter 73 {"conn-limit":{"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-72 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-72 @@ -3318,7 +1059,7 @@ Filter 367 {"conn-limit":{"log":false,"name":"A","update inet/filter/limit-72 -j ACCEPT inet6/filter/limit-72 -j ACCEPT -Filter 368 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"out":"B"} +Filter 74 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-73 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-73 @@ -3327,7 +1068,7 @@ Filter 368 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-73 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-73 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 369 {"conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 75 {"conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-74 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-74 @@ -3340,7 +1081,7 @@ Filter 369 {"conn-limit":{"log":false,"name":"A","update inet/filter/limit-74 -j ACCEPT inet6/filter/limit-74 -j ACCEPT -Filter 370 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 76 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-75 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-75 @@ -3351,7 +1092,7 @@ Filter 370 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-75 -m limit --limit 1/second -j LOG inet6/filter/limit-75 -m limit --limit 1/second -j LOG -Filter 371 {"conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 77 {"conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-76 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-76 @@ -3362,7 +1103,7 @@ Filter 371 {"conn-limit":{"log":false,"name":"A","update inet/filter/limit-76 -j ACCEPT inet6/filter/limit-76 -j ACCEPT -Filter 372 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 78 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-77 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-77 @@ -3371,7 +1112,7 @@ Filter 372 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-77 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-77 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 373 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} +Filter 79 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-78 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-78 @@ -3382,7 +1123,7 @@ Filter 373 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 374 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} +Filter 80 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-79 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-79 @@ -3393,7 +1134,7 @@ Filter 374 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 375 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} +Filter 81 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-80 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-80 @@ -3406,7 +1147,7 @@ Filter 375 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 376 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} +Filter 82 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-81 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-81 @@ -3417,7 +1158,7 @@ Filter 376 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 377 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} +Filter 83 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-82 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-82 @@ -3428,7 +1169,7 @@ Filter 377 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 378 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} +Filter 84 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-83 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-83 @@ -3439,7 +1180,7 @@ Filter 378 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 379 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} +Filter 85 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-84 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-84 @@ -3450,7 +1191,7 @@ Filter 379 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-84 -j ACCEPT inet6/filter/limit-84 -j ACCEPT -Filter 380 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} +Filter 86 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-85 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-85 @@ -3459,7 +1200,7 @@ Filter 380 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-85 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-85 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 381 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 87 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-86 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-86 @@ -3472,7 +1213,7 @@ Filter 381 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-86 -j ACCEPT inet6/filter/limit-86 -j ACCEPT -Filter 382 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 88 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-87 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-87 @@ -3483,7 +1224,7 @@ Filter 382 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-87 -m limit --limit 1/second -j LOG inet6/filter/limit-87 -m limit --limit 1/second -j LOG -Filter 383 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 89 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-88 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-88 @@ -3494,7 +1235,7 @@ Filter 383 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-88 -j ACCEPT inet6/filter/limit-88 -j ACCEPT -Filter 384 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 90 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-89 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-89 @@ -3503,7 +1244,7 @@ Filter 384 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-89 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-89 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 385 {"conn-limit":{"log":false,"name":"C"},"out":"B"} +Filter 91 {"conn-limit":{"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-90 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-90 @@ -3514,7 +1255,7 @@ Filter 385 {"conn-limit":{"log":false,"name":"C"},"out": inet/filter/limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-90 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 386 {"action":"pass","conn-limit":{"log":false,"name":"C"},"out":"B"} +Filter 92 {"action":"pass","conn-limit":{"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-91 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-91 @@ -3525,7 +1266,7 @@ Filter 386 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-91 -m recent --name user:C --rsource --mask fe00:: --set -Filter 387 {"conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} +Filter 93 {"conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-92 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-92 @@ -3538,7 +1279,7 @@ Filter 387 {"conn-limit":{"log":false,"name":"C"},"log": inet/filter/limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-92 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 388 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} +Filter 94 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-93 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-93 @@ -3549,7 +1290,7 @@ Filter 388 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-93 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 389 {"conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} +Filter 95 {"conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-94 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-94 @@ -3560,7 +1301,7 @@ Filter 389 {"conn-limit":{"log":false,"name":"C"},"log": inet/filter/limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-94 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 390 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} +Filter 96 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-95 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-95 @@ -3571,7 +1312,7 @@ Filter 390 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-95 -m recent --name user:C --rsource --mask fe00:: --set -Filter 391 {"conn-limit":{"log":false,"name":"C","update":false},"out":"B"} +Filter 97 {"conn-limit":{"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-96 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-96 @@ -3582,7 +1323,7 @@ Filter 391 {"conn-limit":{"log":false,"name":"C","update inet/filter/limit-96 -j ACCEPT inet6/filter/limit-96 -j ACCEPT -Filter 392 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"out":"B"} +Filter 98 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-97 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-97 @@ -3591,7 +1332,7 @@ Filter 392 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-97 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-97 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 393 {"conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 99 {"conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-98 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-98 @@ -3604,7 +1345,7 @@ Filter 393 {"conn-limit":{"log":false,"name":"C","update inet/filter/limit-98 -j ACCEPT inet6/filter/limit-98 -j ACCEPT -Filter 394 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 100 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-99 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-99 @@ -3615,7 +1356,7 @@ Filter 394 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-99 -m limit --limit 1/second -j LOG inet6/filter/limit-99 -m limit --limit 1/second -j LOG -Filter 395 {"conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 101 {"conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-100 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-100 @@ -3626,7 +1367,7 @@ Filter 395 {"conn-limit":{"log":false,"name":"C","update inet/filter/limit-100 -j ACCEPT inet6/filter/limit-100 -j ACCEPT -Filter 396 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 102 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-101 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-101 @@ -3635,7 +1376,7 @@ Filter 396 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-101 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-101 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 397 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} +Filter 103 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-102 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-102 @@ -3646,7 +1387,7 @@ Filter 397 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-102 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 398 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} +Filter 104 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-103 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-103 @@ -3657,7 +1398,7 @@ Filter 398 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-103 -m recent --name user:C --rdest --mask fe00:: --set -Filter 399 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} +Filter 105 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-104 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-104 @@ -3670,7 +1411,7 @@ Filter 399 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-104 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 400 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} +Filter 106 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-105 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-105 @@ -3681,7 +1422,7 @@ Filter 400 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-105 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 401 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} +Filter 107 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-106 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-106 @@ -3692,7 +1433,7 @@ Filter 401 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 402 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} +Filter 108 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-107 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-107 @@ -3703,7 +1444,7 @@ Filter 402 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-107 -m recent --name user:C --rdest --mask fe00:: --set -Filter 403 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} +Filter 109 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-108 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-108 @@ -3714,7 +1455,7 @@ Filter 403 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-108 -j ACCEPT inet6/filter/limit-108 -j ACCEPT -Filter 404 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} +Filter 110 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-109 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-109 @@ -3723,7 +1464,7 @@ Filter 404 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-109 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-109 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 405 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 111 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-110 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-110 @@ -3736,7 +1477,7 @@ Filter 405 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-110 -j ACCEPT inet6/filter/limit-110 -j ACCEPT -Filter 406 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 112 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-111 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-111 @@ -3747,7 +1488,7 @@ Filter 406 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-111 -m limit --limit 1/second -j LOG inet6/filter/limit-111 -m limit --limit 1/second -j LOG -Filter 407 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 113 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-112 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-112 @@ -3758,7 +1499,7 @@ Filter 407 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-112 -j ACCEPT inet6/filter/limit-112 -j ACCEPT -Filter 408 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 114 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-113 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-113 @@ -3767,7 +1508,7 @@ Filter 408 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-113 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-113 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 409 {"conn-limit":{"log":"none"},"out":"B"} +Filter 115 {"conn-limit":{"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-114 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-114 @@ -3778,7 +1519,7 @@ Filter 409 {"conn-limit":{"log":"none"},"out":"B"} inet/filter/limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 410 {"action":"pass","conn-limit":{"log":"none"},"out":"B"} +Filter 116 {"action":"pass","conn-limit":{"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-115 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-115 @@ -3789,7 +1530,7 @@ Filter 410 {"action":"pass","conn-limit":{"log":"none"}, inet/filter/limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --set inet6/filter/limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 411 {"conn-limit":{"log":"none"},"log":true,"out":"B"} +Filter 117 {"conn-limit":{"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-116 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-116 @@ -3802,7 +1543,7 @@ Filter 411 {"conn-limit":{"log":"none"},"log":true,"out" inet/filter/limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 412 {"action":"pass","conn-limit":{"log":"none"},"log":true,"out":"B"} +Filter 118 {"action":"pass","conn-limit":{"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-117 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-117 @@ -3813,7 +1554,7 @@ Filter 412 {"action":"pass","conn-limit":{"log":"none"}, inet/filter/limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 413 {"conn-limit":{"log":"none"},"log":"none","out":"B"} +Filter 119 {"conn-limit":{"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-118 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-118 @@ -3824,7 +1565,7 @@ Filter 413 {"conn-limit":{"log":"none"},"log":"none","ou inet/filter/limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 414 {"action":"pass","conn-limit":{"log":"none"},"log":"none","out":"B"} +Filter 120 {"action":"pass","conn-limit":{"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-119 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-119 @@ -3835,7 +1576,7 @@ Filter 414 {"action":"pass","conn-limit":{"log":"none"}, inet/filter/limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --set inet6/filter/limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 415 {"conn-limit":{"log":"none","name":"A"},"out":"B"} +Filter 121 {"conn-limit":{"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-120 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-120 @@ -3846,7 +1587,7 @@ Filter 415 {"conn-limit":{"log":"none","name":"A"},"out" inet/filter/limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 416 {"action":"pass","conn-limit":{"log":"none","name":"A"},"out":"B"} +Filter 122 {"action":"pass","conn-limit":{"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-121 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-121 @@ -3857,7 +1598,7 @@ Filter 416 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 417 {"conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} +Filter 123 {"conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-122 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-122 @@ -3870,7 +1611,7 @@ Filter 417 {"conn-limit":{"log":"none","name":"A"},"log" inet/filter/limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 418 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} +Filter 124 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-123 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-123 @@ -3881,7 +1622,7 @@ Filter 418 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 419 {"conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} +Filter 125 {"conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-124 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-124 @@ -3892,7 +1633,7 @@ Filter 419 {"conn-limit":{"log":"none","name":"A"},"log" inet/filter/limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 420 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} +Filter 126 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-125 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-125 @@ -3903,7 +1644,7 @@ Filter 420 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 421 {"conn-limit":{"log":"none","name":"A","update":false},"out":"B"} +Filter 127 {"conn-limit":{"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-126 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-126 @@ -3914,7 +1655,7 @@ Filter 421 {"conn-limit":{"log":"none","name":"A","updat inet/filter/limit-126 -j ACCEPT inet6/filter/limit-126 -j ACCEPT -Filter 422 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"out":"B"} +Filter 128 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-127 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-127 @@ -3923,7 +1664,7 @@ Filter 422 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-127 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-127 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 423 {"conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 129 {"conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-128 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-128 @@ -3936,7 +1677,7 @@ Filter 423 {"conn-limit":{"log":"none","name":"A","updat inet/filter/limit-128 -j ACCEPT inet6/filter/limit-128 -j ACCEPT -Filter 424 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 130 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-129 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-129 @@ -3947,7 +1688,7 @@ Filter 424 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-129 -m limit --limit 1/second -j LOG inet6/filter/limit-129 -m limit --limit 1/second -j LOG -Filter 425 {"conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 131 {"conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-130 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-130 @@ -3958,7 +1699,7 @@ Filter 425 {"conn-limit":{"log":"none","name":"A","updat inet/filter/limit-130 -j ACCEPT inet6/filter/limit-130 -j ACCEPT -Filter 426 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 132 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-131 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-131 @@ -3967,7 +1708,7 @@ Filter 426 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-131 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-131 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 427 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} +Filter 133 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-132 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-132 @@ -3978,7 +1719,7 @@ Filter 427 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 428 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} +Filter 134 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-133 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-133 @@ -3989,7 +1730,7 @@ Filter 428 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 429 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} +Filter 135 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-134 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-134 @@ -4002,7 +1743,7 @@ Filter 429 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 430 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} +Filter 136 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-135 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-135 @@ -4013,7 +1754,7 @@ Filter 430 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 431 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} +Filter 137 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-136 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-136 @@ -4024,7 +1765,7 @@ Filter 431 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 432 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} +Filter 138 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-137 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-137 @@ -4035,7 +1776,7 @@ Filter 432 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 433 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} +Filter 139 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-138 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-138 @@ -4046,7 +1787,7 @@ Filter 433 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-138 -j ACCEPT inet6/filter/limit-138 -j ACCEPT -Filter 434 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} +Filter 140 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-139 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-139 @@ -4055,7 +1796,7 @@ Filter 434 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-139 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 435 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 141 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-140 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-140 @@ -4068,7 +1809,7 @@ Filter 435 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-140 -j ACCEPT inet6/filter/limit-140 -j ACCEPT -Filter 436 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 142 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-141 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-141 @@ -4079,7 +1820,7 @@ Filter 436 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-141 -m limit --limit 1/second -j LOG inet6/filter/limit-141 -m limit --limit 1/second -j LOG -Filter 437 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 143 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-142 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-142 @@ -4090,7 +1831,7 @@ Filter 437 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-142 -j ACCEPT inet6/filter/limit-142 -j ACCEPT -Filter 438 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 144 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-143 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-143 @@ -4099,7 +1840,7 @@ Filter 438 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 439 {"conn-limit":{"log":"none","name":"C"},"out":"B"} +Filter 145 {"conn-limit":{"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-144 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-144 @@ -4110,7 +1851,7 @@ Filter 439 {"conn-limit":{"log":"none","name":"C"},"out" inet/filter/limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-144 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 440 {"action":"pass","conn-limit":{"log":"none","name":"C"},"out":"B"} +Filter 146 {"action":"pass","conn-limit":{"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-145 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-145 @@ -4121,7 +1862,7 @@ Filter 440 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-145 -m recent --name user:C --rsource --mask fe00:: --set -Filter 441 {"conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} +Filter 147 {"conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-146 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-146 @@ -4134,7 +1875,7 @@ Filter 441 {"conn-limit":{"log":"none","name":"C"},"log" inet/filter/limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-146 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 442 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} +Filter 148 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-147 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-147 @@ -4145,7 +1886,7 @@ Filter 442 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-147 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 443 {"conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} +Filter 149 {"conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-148 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-148 @@ -4156,7 +1897,7 @@ Filter 443 {"conn-limit":{"log":"none","name":"C"},"log" inet/filter/limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-148 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 444 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} +Filter 150 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-149 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-149 @@ -4167,7 +1908,7 @@ Filter 444 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-149 -m recent --name user:C --rsource --mask fe00:: --set -Filter 445 {"conn-limit":{"log":"none","name":"C","update":false},"out":"B"} +Filter 151 {"conn-limit":{"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-150 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-150 @@ -4178,7 +1919,7 @@ Filter 445 {"conn-limit":{"log":"none","name":"C","updat inet/filter/limit-150 -j ACCEPT inet6/filter/limit-150 -j ACCEPT -Filter 446 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"out":"B"} +Filter 152 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-151 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-151 @@ -4187,7 +1928,7 @@ Filter 446 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-151 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-151 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 447 {"conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 153 {"conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-152 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-152 @@ -4200,7 +1941,7 @@ Filter 447 {"conn-limit":{"log":"none","name":"C","updat inet/filter/limit-152 -j ACCEPT inet6/filter/limit-152 -j ACCEPT -Filter 448 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 154 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-153 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-153 @@ -4211,7 +1952,7 @@ Filter 448 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-153 -m limit --limit 1/second -j LOG inet6/filter/limit-153 -m limit --limit 1/second -j LOG -Filter 449 {"conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 155 {"conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-154 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-154 @@ -4222,7 +1963,7 @@ Filter 449 {"conn-limit":{"log":"none","name":"C","updat inet/filter/limit-154 -j ACCEPT inet6/filter/limit-154 -j ACCEPT -Filter 450 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 156 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-155 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-155 @@ -4231,7 +1972,7 @@ Filter 450 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-155 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 451 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} +Filter 157 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-156 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-156 @@ -4242,7 +1983,7 @@ Filter 451 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-156 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 452 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} +Filter 158 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-157 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-157 @@ -4253,7 +1994,7 @@ Filter 452 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-157 -m recent --name user:C --rdest --mask fe00:: --set -Filter 453 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} +Filter 159 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-158 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-158 @@ -4266,7 +2007,7 @@ Filter 453 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-158 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 454 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} +Filter 160 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-159 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-159 @@ -4277,7 +2018,7 @@ Filter 454 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-159 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 455 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} +Filter 161 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-160 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-160 @@ -4288,7 +2029,7 @@ Filter 455 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-160 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 456 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} +Filter 162 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-161 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-161 @@ -4299,7 +2040,7 @@ Filter 456 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-161 -m recent --name user:C --rdest --mask fe00:: --set -Filter 457 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} +Filter 163 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-162 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-162 @@ -4310,7 +2051,7 @@ Filter 457 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-162 -j ACCEPT inet6/filter/limit-162 -j ACCEPT -Filter 458 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} +Filter 164 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-163 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-163 @@ -4319,7 +2060,7 @@ Filter 458 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-163 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-163 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 459 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 165 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-164 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-164 @@ -4332,7 +2073,7 @@ Filter 459 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-164 -j ACCEPT inet6/filter/limit-164 -j ACCEPT -Filter 460 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 166 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-165 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-165 @@ -4343,7 +2084,7 @@ Filter 460 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-165 -m limit --limit 1/second -j LOG inet6/filter/limit-165 -m limit --limit 1/second -j LOG -Filter 461 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 167 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-166 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-166 @@ -4354,7 +2095,7 @@ Filter 461 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-166 -j ACCEPT inet6/filter/limit-166 -j ACCEPT -Filter 462 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 168 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-167 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-167 @@ -4363,819 +2104,819 @@ Filter 462 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-167 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-167 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 463 {"conn-limit":{"interval":5},"out":"B"} +Filter 169 {"conn-limit":{"interval":5},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-168 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-168 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-168 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-168 - inet/filter/limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-61 - inet6/filter/limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-61 - inet/filter/logdrop-61 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-61 -m limit --limit 1/second -j LOG - inet/filter/logdrop-61 -j DROP - inet6/filter/logdrop-61 -j DROP + inet/filter/limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-60 + inet6/filter/limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-60 + inet/filter/logdrop-60 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-60 -m limit --limit 1/second -j LOG + inet/filter/logdrop-60 -j DROP + inet6/filter/logdrop-60 -j DROP inet/filter/limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 464 {"action":"pass","conn-limit":{"interval":5},"out":"B"} +Filter 170 {"action":"pass","conn-limit":{"interval":5},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-169 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-169 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-169 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-169 - inet/filter/limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-62 - inet6/filter/limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-62 - inet/filter/logdrop-62 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-62 -m limit --limit 1/second -j LOG - inet/filter/logdrop-62 -j DROP - inet6/filter/logdrop-62 -j DROP + inet/filter/limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-61 + inet6/filter/limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-61 + inet/filter/logdrop-61 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-61 -m limit --limit 1/second -j LOG + inet/filter/logdrop-61 -j DROP + inet6/filter/logdrop-61 -j DROP inet/filter/limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --set inet6/filter/limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 465 {"conn-limit":{"interval":5},"log":true,"out":"B"} +Filter 171 {"conn-limit":{"interval":5},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-170 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-170 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-170 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-170 - inet/filter/limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-63 - inet6/filter/limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-63 - inet/filter/logdrop-63 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-63 -m limit --limit 1/second -j LOG - inet/filter/logdrop-63 -j DROP - inet6/filter/logdrop-63 -j DROP + inet/filter/limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-62 + inet6/filter/limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-62 + inet/filter/logdrop-62 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-62 -m limit --limit 1/second -j LOG + inet/filter/logdrop-62 -j DROP + inet6/filter/logdrop-62 -j DROP inet/filter/limit-170 -m limit --limit 1/second -j LOG inet6/filter/limit-170 -m limit --limit 1/second -j LOG inet/filter/limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 466 {"action":"pass","conn-limit":{"interval":5},"log":true,"out":"B"} +Filter 172 {"action":"pass","conn-limit":{"interval":5},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-171 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-171 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-171 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-171 - inet/filter/limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-64 - inet6/filter/limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-64 - inet/filter/logdrop-64 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-64 -m limit --limit 1/second -j LOG - inet/filter/logdrop-64 -j DROP - inet6/filter/logdrop-64 -j DROP + inet/filter/limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-63 + inet6/filter/limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-63 + inet/filter/logdrop-63 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-63 -m limit --limit 1/second -j LOG + inet/filter/logdrop-63 -j DROP + inet6/filter/logdrop-63 -j DROP inet/filter/limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 467 {"conn-limit":{"interval":5},"log":"none","out":"B"} +Filter 173 {"conn-limit":{"interval":5},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-172 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-172 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-172 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-172 - inet/filter/limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-65 - inet6/filter/limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-65 - inet/filter/logdrop-65 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-65 -m limit --limit 1/second -j LOG - inet/filter/logdrop-65 -j DROP - inet6/filter/logdrop-65 -j DROP + inet/filter/limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-64 + inet6/filter/limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-64 + inet/filter/logdrop-64 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-64 -m limit --limit 1/second -j LOG + inet/filter/logdrop-64 -j DROP + inet6/filter/logdrop-64 -j DROP inet/filter/limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 468 {"action":"pass","conn-limit":{"interval":5},"log":"none","out":"B"} +Filter 174 {"action":"pass","conn-limit":{"interval":5},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-173 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-173 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-173 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-173 - inet/filter/limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-66 - inet6/filter/limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-66 - inet/filter/logdrop-66 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-66 -m limit --limit 1/second -j LOG - inet/filter/logdrop-66 -j DROP - inet6/filter/logdrop-66 -j DROP + inet/filter/limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-65 + inet6/filter/limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-65 + inet/filter/logdrop-65 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-65 -m limit --limit 1/second -j LOG + inet/filter/logdrop-65 -j DROP + inet6/filter/logdrop-65 -j DROP inet/filter/limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --set inet6/filter/limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 469 {"conn-limit":{"interval":5,"name":"A"},"out":"B"} +Filter 175 {"conn-limit":{"interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-174 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-174 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-174 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-174 - inet/filter/limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-67 - inet6/filter/limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-67 - inet/filter/logdrop-67 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-67 -m limit --limit 1/second -j LOG - inet/filter/logdrop-67 -j DROP - inet6/filter/logdrop-67 -j DROP + inet/filter/limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-66 + inet6/filter/limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-66 + inet/filter/logdrop-66 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-66 -m limit --limit 1/second -j LOG + inet/filter/logdrop-66 -j DROP + inet6/filter/logdrop-66 -j DROP inet/filter/limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 470 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"out":"B"} +Filter 176 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-175 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-175 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-175 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-175 - inet/filter/limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-68 - inet6/filter/limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-68 - inet/filter/logdrop-68 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-68 -m limit --limit 1/second -j LOG - inet/filter/logdrop-68 -j DROP - inet6/filter/logdrop-68 -j DROP + inet/filter/limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-67 + inet6/filter/limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-67 + inet/filter/logdrop-67 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-67 -m limit --limit 1/second -j LOG + inet/filter/logdrop-67 -j DROP + inet6/filter/logdrop-67 -j DROP inet/filter/limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 471 {"conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} +Filter 177 {"conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-176 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-176 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-176 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-176 - inet/filter/limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-69 - inet6/filter/limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-69 - inet/filter/logdrop-69 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-69 -m limit --limit 1/second -j LOG - inet/filter/logdrop-69 -j DROP - inet6/filter/logdrop-69 -j DROP + inet/filter/limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-68 + inet6/filter/limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-68 + inet/filter/logdrop-68 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-68 -m limit --limit 1/second -j LOG + inet/filter/logdrop-68 -j DROP + inet6/filter/logdrop-68 -j DROP inet/filter/limit-176 -m limit --limit 1/second -j LOG inet6/filter/limit-176 -m limit --limit 1/second -j LOG inet/filter/limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 472 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} +Filter 178 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-177 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-177 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-177 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-177 - inet/filter/limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-70 - inet6/filter/limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-70 - inet/filter/logdrop-70 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-70 -m limit --limit 1/second -j LOG - inet/filter/logdrop-70 -j DROP - inet6/filter/logdrop-70 -j DROP + inet/filter/limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-69 + inet6/filter/limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-69 + inet/filter/logdrop-69 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-69 -m limit --limit 1/second -j LOG + inet/filter/logdrop-69 -j DROP + inet6/filter/logdrop-69 -j DROP inet/filter/limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 473 {"conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} +Filter 179 {"conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-178 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-178 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-178 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-178 - inet/filter/limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-71 - inet6/filter/limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-71 - inet/filter/logdrop-71 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-71 -m limit --limit 1/second -j LOG - inet/filter/logdrop-71 -j DROP - inet6/filter/logdrop-71 -j DROP + inet/filter/limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-70 + inet6/filter/limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-70 + inet/filter/logdrop-70 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-70 -m limit --limit 1/second -j LOG + inet/filter/logdrop-70 -j DROP + inet6/filter/logdrop-70 -j DROP inet/filter/limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 474 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} +Filter 180 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-179 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-179 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-179 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-179 - inet/filter/limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-72 - inet6/filter/limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-72 - inet/filter/logdrop-72 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-72 -m limit --limit 1/second -j LOG - inet/filter/logdrop-72 -j DROP - inet6/filter/logdrop-72 -j DROP + inet/filter/limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-71 + inet6/filter/limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-71 + inet/filter/logdrop-71 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-71 -m limit --limit 1/second -j LOG + inet/filter/logdrop-71 -j DROP + inet6/filter/logdrop-71 -j DROP inet/filter/limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 475 {"conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} +Filter 181 {"conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-180 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-180 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-180 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-180 - inet/filter/limit-180 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-73 - inet6/filter/limit-180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-73 - inet/filter/logdrop-73 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-73 -m limit --limit 1/second -j LOG - inet/filter/logdrop-73 -j DROP - inet6/filter/logdrop-73 -j DROP + inet/filter/limit-180 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-72 + inet6/filter/limit-180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-72 + inet/filter/logdrop-72 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-72 -m limit --limit 1/second -j LOG + inet/filter/logdrop-72 -j DROP + inet6/filter/logdrop-72 -j DROP inet/filter/limit-180 -j ACCEPT inet6/filter/limit-180 -j ACCEPT -Filter 476 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} +Filter 182 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-181 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-181 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-181 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-181 - inet/filter/limit-181 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 - inet6/filter/limit-181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 - inet/filter/logdrop-74 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-74 -m limit --limit 1/second -j LOG - inet/filter/logdrop-74 -j DROP - inet6/filter/logdrop-74 -j DROP + inet/filter/limit-181 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-73 + inet6/filter/limit-181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-73 + inet/filter/logdrop-73 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-73 -m limit --limit 1/second -j LOG + inet/filter/logdrop-73 -j DROP + inet6/filter/logdrop-73 -j DROP -Filter 477 {"conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 183 {"conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-182 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-182 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-182 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-182 - inet/filter/limit-182 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-75 - inet6/filter/limit-182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-75 - inet/filter/logdrop-75 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-75 -m limit --limit 1/second -j LOG - inet/filter/logdrop-75 -j DROP - inet6/filter/logdrop-75 -j DROP + inet/filter/limit-182 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 + inet6/filter/limit-182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 + inet/filter/logdrop-74 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-74 -m limit --limit 1/second -j LOG + inet/filter/logdrop-74 -j DROP + inet6/filter/logdrop-74 -j DROP inet/filter/limit-182 -m limit --limit 1/second -j LOG inet6/filter/limit-182 -m limit --limit 1/second -j LOG inet/filter/limit-182 -j ACCEPT inet6/filter/limit-182 -j ACCEPT -Filter 478 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 184 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-183 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-183 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-183 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-183 - inet/filter/limit-183 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-76 - inet6/filter/limit-183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-76 - inet/filter/logdrop-76 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-76 -m limit --limit 1/second -j LOG - inet/filter/logdrop-76 -j DROP - inet6/filter/logdrop-76 -j DROP + inet/filter/limit-183 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-75 + inet6/filter/limit-183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-75 + inet/filter/logdrop-75 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-75 -m limit --limit 1/second -j LOG + inet/filter/logdrop-75 -j DROP + inet6/filter/logdrop-75 -j DROP inet/filter/limit-183 -m limit --limit 1/second -j LOG inet6/filter/limit-183 -m limit --limit 1/second -j LOG -Filter 479 {"conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 185 {"conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-184 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-184 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-184 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-184 - inet/filter/limit-184 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-77 - inet6/filter/limit-184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-77 - inet/filter/logdrop-77 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-77 -m limit --limit 1/second -j LOG - inet/filter/logdrop-77 -j DROP - inet6/filter/logdrop-77 -j DROP + inet/filter/limit-184 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-76 + inet6/filter/limit-184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-76 + inet/filter/logdrop-76 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-76 -m limit --limit 1/second -j LOG + inet/filter/logdrop-76 -j DROP + inet6/filter/logdrop-76 -j DROP inet/filter/limit-184 -j ACCEPT inet6/filter/limit-184 -j ACCEPT -Filter 480 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 186 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-185 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-185 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-185 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-185 - inet/filter/limit-185 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-78 - inet6/filter/limit-185 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-78 - inet/filter/logdrop-78 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-78 -m limit --limit 1/second -j LOG - inet/filter/logdrop-78 -j DROP - inet6/filter/logdrop-78 -j DROP + inet/filter/limit-185 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-77 + inet6/filter/limit-185 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-77 + inet/filter/logdrop-77 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-77 -m limit --limit 1/second -j LOG + inet/filter/logdrop-77 -j DROP + inet6/filter/logdrop-77 -j DROP -Filter 481 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} +Filter 187 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-186 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-186 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-186 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-186 - inet/filter/limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-79 - inet6/filter/limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-79 - inet/filter/logdrop-79 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-79 -m limit --limit 1/second -j LOG - inet/filter/logdrop-79 -j DROP - inet6/filter/logdrop-79 -j DROP + inet/filter/limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-78 + inet6/filter/limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-78 + inet/filter/logdrop-78 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-78 -m limit --limit 1/second -j LOG + inet/filter/logdrop-78 -j DROP + inet6/filter/logdrop-78 -j DROP inet/filter/limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 482 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} +Filter 188 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-187 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-187 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-187 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-187 - inet/filter/limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-80 - inet6/filter/limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-80 - inet/filter/logdrop-80 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-80 -m limit --limit 1/second -j LOG - inet/filter/logdrop-80 -j DROP - inet6/filter/logdrop-80 -j DROP + inet/filter/limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-79 + inet6/filter/limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-79 + inet/filter/logdrop-79 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-79 -m limit --limit 1/second -j LOG + inet/filter/logdrop-79 -j DROP + inet6/filter/logdrop-79 -j DROP inet/filter/limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 483 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} +Filter 189 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-188 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-188 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-188 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-188 - inet/filter/limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-81 - inet6/filter/limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-81 - inet/filter/logdrop-81 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-81 -m limit --limit 1/second -j LOG - inet/filter/logdrop-81 -j DROP - inet6/filter/logdrop-81 -j DROP + inet/filter/limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-80 + inet6/filter/limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-80 + inet/filter/logdrop-80 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-80 -m limit --limit 1/second -j LOG + inet/filter/logdrop-80 -j DROP + inet6/filter/logdrop-80 -j DROP inet/filter/limit-188 -m limit --limit 1/second -j LOG inet6/filter/limit-188 -m limit --limit 1/second -j LOG inet/filter/limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 484 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} +Filter 190 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-189 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-189 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-189 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-189 - inet/filter/limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-82 - inet6/filter/limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-82 - inet/filter/logdrop-82 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-82 -m limit --limit 1/second -j LOG - inet/filter/logdrop-82 -j DROP - inet6/filter/logdrop-82 -j DROP + inet/filter/limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-81 + inet6/filter/limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-81 + inet/filter/logdrop-81 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-81 -m limit --limit 1/second -j LOG + inet/filter/logdrop-81 -j DROP + inet6/filter/logdrop-81 -j DROP inet/filter/limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 485 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} +Filter 191 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-190 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-190 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-190 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-190 - inet/filter/limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-83 - inet6/filter/limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-83 - inet/filter/logdrop-83 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-83 -m limit --limit 1/second -j LOG - inet/filter/logdrop-83 -j DROP - inet6/filter/logdrop-83 -j DROP + inet/filter/limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-82 + inet6/filter/limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-82 + inet/filter/logdrop-82 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-82 -m limit --limit 1/second -j LOG + inet/filter/logdrop-82 -j DROP + inet6/filter/logdrop-82 -j DROP inet/filter/limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 486 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} +Filter 192 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-191 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-191 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-191 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-191 - inet/filter/limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-84 - inet6/filter/limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-84 - inet/filter/logdrop-84 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-84 -m limit --limit 1/second -j LOG - inet/filter/logdrop-84 -j DROP - inet6/filter/logdrop-84 -j DROP + inet/filter/limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-83 + inet6/filter/limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-83 + inet/filter/logdrop-83 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-83 -m limit --limit 1/second -j LOG + inet/filter/logdrop-83 -j DROP + inet6/filter/logdrop-83 -j DROP inet/filter/limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 487 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} +Filter 193 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-192 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-192 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-192 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-192 - inet/filter/limit-192 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-85 - inet6/filter/limit-192 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-85 - inet/filter/logdrop-85 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-85 -m limit --limit 1/second -j LOG - inet/filter/logdrop-85 -j DROP - inet6/filter/logdrop-85 -j DROP + inet/filter/limit-192 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-84 + inet6/filter/limit-192 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-84 + inet/filter/logdrop-84 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-84 -m limit --limit 1/second -j LOG + inet/filter/logdrop-84 -j DROP + inet6/filter/logdrop-84 -j DROP inet/filter/limit-192 -j ACCEPT inet6/filter/limit-192 -j ACCEPT -Filter 488 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} +Filter 194 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-193 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-193 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-193 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-193 - inet/filter/limit-193 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 - inet6/filter/limit-193 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 - inet/filter/logdrop-86 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-86 -m limit --limit 1/second -j LOG - inet/filter/logdrop-86 -j DROP - inet6/filter/logdrop-86 -j DROP + inet/filter/limit-193 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-85 + inet6/filter/limit-193 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-85 + inet/filter/logdrop-85 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-85 -m limit --limit 1/second -j LOG + inet/filter/logdrop-85 -j DROP + inet6/filter/logdrop-85 -j DROP -Filter 489 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 195 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-194 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-194 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-194 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-194 - inet/filter/limit-194 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-87 - inet6/filter/limit-194 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-87 - inet/filter/logdrop-87 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-87 -m limit --limit 1/second -j LOG - inet/filter/logdrop-87 -j DROP - inet6/filter/logdrop-87 -j DROP + inet/filter/limit-194 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 + inet6/filter/limit-194 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 + inet/filter/logdrop-86 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-86 -m limit --limit 1/second -j LOG + inet/filter/logdrop-86 -j DROP + inet6/filter/logdrop-86 -j DROP inet/filter/limit-194 -m limit --limit 1/second -j LOG inet6/filter/limit-194 -m limit --limit 1/second -j LOG inet/filter/limit-194 -j ACCEPT inet6/filter/limit-194 -j ACCEPT -Filter 490 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 196 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-195 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-195 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-195 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-195 - inet/filter/limit-195 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-88 - inet6/filter/limit-195 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-88 - inet/filter/logdrop-88 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-88 -m limit --limit 1/second -j LOG - inet/filter/logdrop-88 -j DROP - inet6/filter/logdrop-88 -j DROP + inet/filter/limit-195 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-87 + inet6/filter/limit-195 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-87 + inet/filter/logdrop-87 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-87 -m limit --limit 1/second -j LOG + inet/filter/logdrop-87 -j DROP + inet6/filter/logdrop-87 -j DROP inet/filter/limit-195 -m limit --limit 1/second -j LOG inet6/filter/limit-195 -m limit --limit 1/second -j LOG -Filter 491 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 197 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-196 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-196 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-196 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-196 - inet/filter/limit-196 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-89 - inet6/filter/limit-196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-89 - inet/filter/logdrop-89 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-89 -m limit --limit 1/second -j LOG - inet/filter/logdrop-89 -j DROP - inet6/filter/logdrop-89 -j DROP + inet/filter/limit-196 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-88 + inet6/filter/limit-196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-88 + inet/filter/logdrop-88 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-88 -m limit --limit 1/second -j LOG + inet/filter/logdrop-88 -j DROP + inet6/filter/logdrop-88 -j DROP inet/filter/limit-196 -j ACCEPT inet6/filter/limit-196 -j ACCEPT -Filter 492 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 198 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-197 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-197 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-197 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-197 - inet/filter/limit-197 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-90 - inet6/filter/limit-197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-90 - inet/filter/logdrop-90 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-90 -m limit --limit 1/second -j LOG - inet/filter/logdrop-90 -j DROP - inet6/filter/logdrop-90 -j DROP + inet/filter/limit-197 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-89 + inet6/filter/limit-197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-89 + inet/filter/logdrop-89 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-89 -m limit --limit 1/second -j LOG + inet/filter/logdrop-89 -j DROP + inet6/filter/logdrop-89 -j DROP -Filter 493 {"conn-limit":{"interval":5,"name":"C"},"out":"B"} +Filter 199 {"conn-limit":{"interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-198 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-198 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-198 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-198 - inet/filter/limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-91 - inet6/filter/limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-91 - inet/filter/logdrop-91 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-91 -m limit --limit 1/second -j LOG - inet/filter/logdrop-91 -j DROP - inet6/filter/logdrop-91 -j DROP + inet/filter/limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-90 + inet6/filter/limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-90 + inet/filter/logdrop-90 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-90 -m limit --limit 1/second -j LOG + inet/filter/logdrop-90 -j DROP + inet6/filter/logdrop-90 -j DROP inet/filter/limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-198 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 494 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"out":"B"} +Filter 200 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-199 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-199 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-199 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-199 - inet/filter/limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-92 - inet6/filter/limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-92 - inet/filter/logdrop-92 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-92 -m limit --limit 1/second -j LOG - inet/filter/logdrop-92 -j DROP - inet6/filter/logdrop-92 -j DROP + inet/filter/limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-91 + inet6/filter/limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-91 + inet/filter/logdrop-91 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-91 -m limit --limit 1/second -j LOG + inet/filter/logdrop-91 -j DROP + inet6/filter/logdrop-91 -j DROP inet/filter/limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-199 -m recent --name user:C --rsource --mask fe00:: --set -Filter 495 {"conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} +Filter 201 {"conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-200 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-200 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-200 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-200 - inet/filter/limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-93 - inet6/filter/limit-200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-93 - inet/filter/logdrop-93 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-93 -m limit --limit 1/second -j LOG - inet/filter/logdrop-93 -j DROP - inet6/filter/logdrop-93 -j DROP + inet/filter/limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-92 + inet6/filter/limit-200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-92 + inet/filter/logdrop-92 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-92 -m limit --limit 1/second -j LOG + inet/filter/logdrop-92 -j DROP + inet6/filter/logdrop-92 -j DROP inet/filter/limit-200 -m limit --limit 1/second -j LOG inet6/filter/limit-200 -m limit --limit 1/second -j LOG inet/filter/limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-200 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 496 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} +Filter 202 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-201 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-201 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-201 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-201 - inet/filter/limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-94 - inet6/filter/limit-201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-94 - inet/filter/logdrop-94 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-94 -m limit --limit 1/second -j LOG - inet/filter/logdrop-94 -j DROP - inet6/filter/logdrop-94 -j DROP + inet/filter/limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-93 + inet6/filter/limit-201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-93 + inet/filter/logdrop-93 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-93 -m limit --limit 1/second -j LOG + inet/filter/logdrop-93 -j DROP + inet6/filter/logdrop-93 -j DROP inet/filter/limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-201 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 497 {"conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} +Filter 203 {"conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-202 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-202 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-202 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-202 - inet/filter/limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-95 - inet6/filter/limit-202 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-95 - inet/filter/logdrop-95 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-95 -m limit --limit 1/second -j LOG - inet/filter/logdrop-95 -j DROP - inet6/filter/logdrop-95 -j DROP + inet/filter/limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-94 + inet6/filter/limit-202 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-94 + inet/filter/logdrop-94 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-94 -m limit --limit 1/second -j LOG + inet/filter/logdrop-94 -j DROP + inet6/filter/logdrop-94 -j DROP inet/filter/limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-202 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 498 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} +Filter 204 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-203 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-203 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-203 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-203 - inet/filter/limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-96 - inet6/filter/limit-203 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-96 - inet/filter/logdrop-96 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-96 -m limit --limit 1/second -j LOG - inet/filter/logdrop-96 -j DROP - inet6/filter/logdrop-96 -j DROP + inet/filter/limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-95 + inet6/filter/limit-203 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-95 + inet/filter/logdrop-95 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-95 -m limit --limit 1/second -j LOG + inet/filter/logdrop-95 -j DROP + inet6/filter/logdrop-95 -j DROP inet/filter/limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-203 -m recent --name user:C --rsource --mask fe00:: --set -Filter 499 {"conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} +Filter 205 {"conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-204 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-204 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-204 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-204 - inet/filter/limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-97 - inet6/filter/limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-97 - inet/filter/logdrop-97 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-97 -m limit --limit 1/second -j LOG - inet/filter/logdrop-97 -j DROP - inet6/filter/logdrop-97 -j DROP + inet/filter/limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-96 + inet6/filter/limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-96 + inet/filter/logdrop-96 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-96 -m limit --limit 1/second -j LOG + inet/filter/logdrop-96 -j DROP + inet6/filter/logdrop-96 -j DROP inet/filter/limit-204 -j ACCEPT inet6/filter/limit-204 -j ACCEPT -Filter 500 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} +Filter 206 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-205 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-205 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-205 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-205 - inet/filter/limit-205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 - inet6/filter/limit-205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 - inet/filter/logdrop-98 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-98 -m limit --limit 1/second -j LOG - inet/filter/logdrop-98 -j DROP - inet6/filter/logdrop-98 -j DROP + inet/filter/limit-205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-97 + inet6/filter/limit-205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-97 + inet/filter/logdrop-97 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-97 -m limit --limit 1/second -j LOG + inet/filter/logdrop-97 -j DROP + inet6/filter/logdrop-97 -j DROP -Filter 501 {"conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} +Filter 207 {"conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-206 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-206 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-206 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-206 - inet/filter/limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-99 - inet6/filter/limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-99 - inet/filter/logdrop-99 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-99 -m limit --limit 1/second -j LOG - inet/filter/logdrop-99 -j DROP - inet6/filter/logdrop-99 -j DROP + inet/filter/limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 + inet6/filter/limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 + inet/filter/logdrop-98 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-98 -m limit --limit 1/second -j LOG + inet/filter/logdrop-98 -j DROP + inet6/filter/logdrop-98 -j DROP inet/filter/limit-206 -m limit --limit 1/second -j LOG inet6/filter/limit-206 -m limit --limit 1/second -j LOG inet/filter/limit-206 -j ACCEPT inet6/filter/limit-206 -j ACCEPT -Filter 502 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} +Filter 208 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-207 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-207 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-207 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-207 - inet/filter/limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-100 - inet6/filter/limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-100 - inet/filter/logdrop-100 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-100 -m limit --limit 1/second -j LOG - inet/filter/logdrop-100 -j DROP - inet6/filter/logdrop-100 -j DROP + inet/filter/limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-99 + inet6/filter/limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-99 + inet/filter/logdrop-99 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-99 -m limit --limit 1/second -j LOG + inet/filter/logdrop-99 -j DROP + inet6/filter/logdrop-99 -j DROP inet/filter/limit-207 -m limit --limit 1/second -j LOG inet6/filter/limit-207 -m limit --limit 1/second -j LOG -Filter 503 {"conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} +Filter 209 {"conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-208 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-208 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-208 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-208 - inet/filter/limit-208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-101 - inet6/filter/limit-208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-101 - inet/filter/logdrop-101 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-101 -m limit --limit 1/second -j LOG - inet/filter/logdrop-101 -j DROP - inet6/filter/logdrop-101 -j DROP + inet/filter/limit-208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-100 + inet6/filter/limit-208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-100 + inet/filter/logdrop-100 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-100 -m limit --limit 1/second -j LOG + inet/filter/logdrop-100 -j DROP + inet6/filter/logdrop-100 -j DROP inet/filter/limit-208 -j ACCEPT inet6/filter/limit-208 -j ACCEPT -Filter 504 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} +Filter 210 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-209 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-209 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-209 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-209 - inet/filter/limit-209 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-102 - inet6/filter/limit-209 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-102 - inet/filter/logdrop-102 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-102 -m limit --limit 1/second -j LOG - inet/filter/logdrop-102 -j DROP - inet6/filter/logdrop-102 -j DROP + inet/filter/limit-209 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-101 + inet6/filter/limit-209 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-101 + inet/filter/logdrop-101 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-101 -m limit --limit 1/second -j LOG + inet/filter/logdrop-101 -j DROP + inet6/filter/logdrop-101 -j DROP -Filter 505 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} +Filter 211 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-210 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-210 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-210 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-210 - inet/filter/limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-103 - inet6/filter/limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-103 - inet/filter/logdrop-103 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-103 -m limit --limit 1/second -j LOG - inet/filter/logdrop-103 -j DROP - inet6/filter/logdrop-103 -j DROP + inet/filter/limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-102 + inet6/filter/limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-102 + inet/filter/logdrop-102 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-102 -m limit --limit 1/second -j LOG + inet/filter/logdrop-102 -j DROP + inet6/filter/logdrop-102 -j DROP inet/filter/limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-210 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 506 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} +Filter 212 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-211 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-211 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-211 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-211 - inet/filter/limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-104 - inet6/filter/limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-104 - inet/filter/logdrop-104 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-104 -m limit --limit 1/second -j LOG - inet/filter/logdrop-104 -j DROP - inet6/filter/logdrop-104 -j DROP + inet/filter/limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-103 + inet6/filter/limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-103 + inet/filter/logdrop-103 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-103 -m limit --limit 1/second -j LOG + inet/filter/logdrop-103 -j DROP + inet6/filter/logdrop-103 -j DROP inet/filter/limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-211 -m recent --name user:C --rdest --mask fe00:: --set -Filter 507 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} +Filter 213 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-212 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-212 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-212 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-212 - inet/filter/limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-105 - inet6/filter/limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-105 - inet/filter/logdrop-105 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-105 -m limit --limit 1/second -j LOG - inet/filter/logdrop-105 -j DROP - inet6/filter/logdrop-105 -j DROP + inet/filter/limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-104 + inet6/filter/limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-104 + inet/filter/logdrop-104 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-104 -m limit --limit 1/second -j LOG + inet/filter/logdrop-104 -j DROP + inet6/filter/logdrop-104 -j DROP inet/filter/limit-212 -m limit --limit 1/second -j LOG inet6/filter/limit-212 -m limit --limit 1/second -j LOG inet/filter/limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-212 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 508 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} +Filter 214 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-213 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-213 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-213 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-213 - inet/filter/limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-106 - inet6/filter/limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-106 - inet/filter/logdrop-106 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-106 -m limit --limit 1/second -j LOG - inet/filter/logdrop-106 -j DROP - inet6/filter/logdrop-106 -j DROP + inet/filter/limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-105 + inet6/filter/limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-105 + inet/filter/logdrop-105 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-105 -m limit --limit 1/second -j LOG + inet/filter/logdrop-105 -j DROP + inet6/filter/logdrop-105 -j DROP inet/filter/limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-213 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 509 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} +Filter 215 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-214 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-214 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-214 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-214 - inet/filter/limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-107 - inet6/filter/limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-107 - inet/filter/logdrop-107 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-107 -m limit --limit 1/second -j LOG - inet/filter/logdrop-107 -j DROP - inet6/filter/logdrop-107 -j DROP + inet/filter/limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-106 + inet6/filter/limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-106 + inet/filter/logdrop-106 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-106 -m limit --limit 1/second -j LOG + inet/filter/logdrop-106 -j DROP + inet6/filter/logdrop-106 -j DROP inet/filter/limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-214 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 510 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} +Filter 216 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-215 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-215 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-215 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-215 - inet/filter/limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-108 - inet6/filter/limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-108 - inet/filter/logdrop-108 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-108 -m limit --limit 1/second -j LOG - inet/filter/logdrop-108 -j DROP - inet6/filter/logdrop-108 -j DROP + inet/filter/limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-107 + inet6/filter/limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-107 + inet/filter/logdrop-107 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-107 -m limit --limit 1/second -j LOG + inet/filter/logdrop-107 -j DROP + inet6/filter/logdrop-107 -j DROP inet/filter/limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-215 -m recent --name user:C --rdest --mask fe00:: --set -Filter 511 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} +Filter 217 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-216 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-216 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-216 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-216 - inet/filter/limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-109 - inet6/filter/limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-109 - inet/filter/logdrop-109 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-109 -m limit --limit 1/second -j LOG - inet/filter/logdrop-109 -j DROP - inet6/filter/logdrop-109 -j DROP + inet/filter/limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-108 + inet6/filter/limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-108 + inet/filter/logdrop-108 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-108 -m limit --limit 1/second -j LOG + inet/filter/logdrop-108 -j DROP + inet6/filter/logdrop-108 -j DROP inet/filter/limit-216 -j ACCEPT inet6/filter/limit-216 -j ACCEPT -Filter 512 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} +Filter 218 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-217 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-217 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-217 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-217 - inet/filter/limit-217 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 - inet6/filter/limit-217 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 - inet/filter/logdrop-110 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-110 -m limit --limit 1/second -j LOG - inet/filter/logdrop-110 -j DROP - inet6/filter/logdrop-110 -j DROP + inet/filter/limit-217 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-109 + inet6/filter/limit-217 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-109 + inet/filter/logdrop-109 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-109 -m limit --limit 1/second -j LOG + inet/filter/logdrop-109 -j DROP + inet6/filter/logdrop-109 -j DROP -Filter 513 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} +Filter 219 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-218 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-218 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-218 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-218 - inet/filter/limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-111 - inet6/filter/limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-111 - inet/filter/logdrop-111 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-111 -m limit --limit 1/second -j LOG - inet/filter/logdrop-111 -j DROP - inet6/filter/logdrop-111 -j DROP + inet/filter/limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 + inet6/filter/limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 + inet/filter/logdrop-110 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-110 -m limit --limit 1/second -j LOG + inet/filter/logdrop-110 -j DROP + inet6/filter/logdrop-110 -j DROP inet/filter/limit-218 -m limit --limit 1/second -j LOG inet6/filter/limit-218 -m limit --limit 1/second -j LOG inet/filter/limit-218 -j ACCEPT inet6/filter/limit-218 -j ACCEPT -Filter 514 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} +Filter 220 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-219 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-219 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-219 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-219 - inet/filter/limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-112 - inet6/filter/limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-112 - inet/filter/logdrop-112 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-112 -m limit --limit 1/second -j LOG - inet/filter/logdrop-112 -j DROP - inet6/filter/logdrop-112 -j DROP + inet/filter/limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-111 + inet6/filter/limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-111 + inet/filter/logdrop-111 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-111 -m limit --limit 1/second -j LOG + inet/filter/logdrop-111 -j DROP + inet6/filter/logdrop-111 -j DROP inet/filter/limit-219 -m limit --limit 1/second -j LOG inet6/filter/limit-219 -m limit --limit 1/second -j LOG -Filter 515 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} +Filter 221 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-220 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-220 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-220 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-220 - inet/filter/limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-113 - inet6/filter/limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-113 - inet/filter/logdrop-113 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-113 -m limit --limit 1/second -j LOG - inet/filter/logdrop-113 -j DROP - inet6/filter/logdrop-113 -j DROP + inet/filter/limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-112 + inet6/filter/limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-112 + inet/filter/logdrop-112 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-112 -m limit --limit 1/second -j LOG + inet/filter/logdrop-112 -j DROP + inet6/filter/logdrop-112 -j DROP inet/filter/limit-220 -j ACCEPT inet6/filter/limit-220 -j ACCEPT -Filter 516 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} +Filter 222 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-221 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-221 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-221 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-221 - inet/filter/limit-221 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-114 - inet6/filter/limit-221 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-114 - inet/filter/logdrop-114 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-114 -m limit --limit 1/second -j LOG - inet/filter/logdrop-114 -j DROP - inet6/filter/logdrop-114 -j DROP + inet/filter/limit-221 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-113 + inet6/filter/limit-221 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-113 + inet/filter/logdrop-113 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-113 -m limit --limit 1/second -j LOG + inet/filter/logdrop-113 -j DROP + inet6/filter/logdrop-113 -j DROP -Filter 517 {"conn-limit":{"interval":5,"log":false},"out":"B"} +Filter 223 {"conn-limit":{"interval":5,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-222 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-222 @@ -5186,7 +2927,7 @@ Filter 517 {"conn-limit":{"interval":5,"log":false},"out inet/filter/limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 518 {"action":"pass","conn-limit":{"interval":5,"log":false},"out":"B"} +Filter 224 {"action":"pass","conn-limit":{"interval":5,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-223 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-223 @@ -5197,7 +2938,7 @@ Filter 518 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --set inet6/filter/limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 519 {"conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} +Filter 225 {"conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-224 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-224 @@ -5210,7 +2951,7 @@ Filter 519 {"conn-limit":{"interval":5,"log":false},"log inet/filter/limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 520 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} +Filter 226 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-225 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-225 @@ -5221,7 +2962,7 @@ Filter 520 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 521 {"conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} +Filter 227 {"conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-226 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-226 @@ -5232,7 +2973,7 @@ Filter 521 {"conn-limit":{"interval":5,"log":false},"log inet/filter/limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 522 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} +Filter 228 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-227 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-227 @@ -5243,7 +2984,7 @@ Filter 522 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --set inet6/filter/limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 523 {"conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} +Filter 229 {"conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-228 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-228 @@ -5254,7 +2995,7 @@ Filter 523 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 524 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} +Filter 230 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-229 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-229 @@ -5265,7 +3006,7 @@ Filter 524 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 525 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 231 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-230 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-230 @@ -5278,7 +3019,7 @@ Filter 525 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 526 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 232 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-231 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-231 @@ -5289,7 +3030,7 @@ Filter 526 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 527 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 233 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-232 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-232 @@ -5300,7 +3041,7 @@ Filter 527 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 528 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 234 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-233 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-233 @@ -5311,7 +3052,7 @@ Filter 528 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 529 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 235 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-234 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-234 @@ -5322,7 +3063,7 @@ Filter 529 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-234 -j ACCEPT inet6/filter/limit-234 -j ACCEPT -Filter 530 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 236 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-235 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-235 @@ -5331,7 +3072,7 @@ Filter 530 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-235 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-235 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 531 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 237 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-236 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-236 @@ -5344,7 +3085,7 @@ Filter 531 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-236 -j ACCEPT inet6/filter/limit-236 -j ACCEPT -Filter 532 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 238 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-237 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-237 @@ -5355,7 +3096,7 @@ Filter 532 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-237 -m limit --limit 1/second -j LOG inet6/filter/limit-237 -m limit --limit 1/second -j LOG -Filter 533 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 239 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-238 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-238 @@ -5366,7 +3107,7 @@ Filter 533 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-238 -j ACCEPT inet6/filter/limit-238 -j ACCEPT -Filter 534 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 240 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-239 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-239 @@ -5375,7 +3116,7 @@ Filter 534 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-239 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-239 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 535 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} +Filter 241 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-240 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-240 @@ -5386,7 +3127,7 @@ Filter 535 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 536 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} +Filter 242 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-241 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-241 @@ -5397,7 +3138,7 @@ Filter 536 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 537 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 243 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-242 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-242 @@ -5410,7 +3151,7 @@ Filter 537 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 538 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 244 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-243 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-243 @@ -5421,7 +3162,7 @@ Filter 538 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 539 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 245 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-244 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-244 @@ -5432,7 +3173,7 @@ Filter 539 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 540 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 246 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-245 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-245 @@ -5443,7 +3184,7 @@ Filter 540 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 541 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 247 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-246 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-246 @@ -5454,7 +3195,7 @@ Filter 541 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-246 -j ACCEPT inet6/filter/limit-246 -j ACCEPT -Filter 542 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 248 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-247 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-247 @@ -5463,7 +3204,7 @@ Filter 542 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-247 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-247 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 543 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 249 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-248 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-248 @@ -5476,7 +3217,7 @@ Filter 543 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-248 -j ACCEPT inet6/filter/limit-248 -j ACCEPT -Filter 544 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 250 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-249 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-249 @@ -5487,7 +3228,7 @@ Filter 544 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-249 -m limit --limit 1/second -j LOG inet6/filter/limit-249 -m limit --limit 1/second -j LOG -Filter 545 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 251 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-250 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-250 @@ -5498,7 +3239,7 @@ Filter 545 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-250 -j ACCEPT inet6/filter/limit-250 -j ACCEPT -Filter 546 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 252 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-251 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-251 @@ -5507,7 +3248,7 @@ Filter 546 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-251 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-251 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 547 {"conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} +Filter 253 {"conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-252 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-252 @@ -5518,7 +3259,7 @@ Filter 547 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-252 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 548 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} +Filter 254 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-253 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-253 @@ -5529,7 +3270,7 @@ Filter 548 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-253 -m recent --name user:C --rsource --mask fe00:: --set -Filter 549 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +Filter 255 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-254 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-254 @@ -5542,7 +3283,7 @@ Filter 549 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-254 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 550 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +Filter 256 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-255 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-255 @@ -5553,7 +3294,7 @@ Filter 550 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-255 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 551 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +Filter 257 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-256 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-256 @@ -5564,7 +3305,7 @@ Filter 551 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-256 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 552 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +Filter 258 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-257 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-257 @@ -5575,7 +3316,7 @@ Filter 552 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-257 -m recent --name user:C --rsource --mask fe00:: --set -Filter 553 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} +Filter 259 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-258 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-258 @@ -5586,7 +3327,7 @@ Filter 553 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-258 -j ACCEPT inet6/filter/limit-258 -j ACCEPT -Filter 554 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} +Filter 260 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-259 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-259 @@ -5595,7 +3336,7 @@ Filter 554 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 555 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 261 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-260 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-260 @@ -5608,7 +3349,7 @@ Filter 555 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-260 -j ACCEPT inet6/filter/limit-260 -j ACCEPT -Filter 556 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 262 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-261 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-261 @@ -5619,7 +3360,7 @@ Filter 556 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-261 -m limit --limit 1/second -j LOG inet6/filter/limit-261 -m limit --limit 1/second -j LOG -Filter 557 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 263 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-262 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-262 @@ -5630,7 +3371,7 @@ Filter 557 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-262 -j ACCEPT inet6/filter/limit-262 -j ACCEPT -Filter 558 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 264 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-263 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-263 @@ -5639,7 +3380,7 @@ Filter 558 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-263 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-263 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 559 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} +Filter 265 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-264 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-264 @@ -5650,7 +3391,7 @@ Filter 559 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 560 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} +Filter 266 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-265 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-265 @@ -5661,7 +3402,7 @@ Filter 560 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-265 -m recent --name user:C --rdest --mask fe00:: --set -Filter 561 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +Filter 267 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-266 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-266 @@ -5674,7 +3415,7 @@ Filter 561 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 562 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +Filter 268 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-267 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-267 @@ -5685,7 +3426,7 @@ Filter 562 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-267 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 563 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +Filter 269 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-268 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-268 @@ -5696,7 +3437,7 @@ Filter 563 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 564 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +Filter 270 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-269 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-269 @@ -5707,7 +3448,7 @@ Filter 564 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-269 -m recent --name user:C --rdest --mask fe00:: --set -Filter 565 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} +Filter 271 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-270 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-270 @@ -5718,7 +3459,7 @@ Filter 565 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-270 -j ACCEPT inet6/filter/limit-270 -j ACCEPT -Filter 566 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} +Filter 272 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-271 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-271 @@ -5727,7 +3468,7 @@ Filter 566 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-271 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-271 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 567 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 273 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-272 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-272 @@ -5740,7 +3481,7 @@ Filter 567 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-272 -j ACCEPT inet6/filter/limit-272 -j ACCEPT -Filter 568 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 274 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-273 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-273 @@ -5751,7 +3492,7 @@ Filter 568 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-273 -m limit --limit 1/second -j LOG inet6/filter/limit-273 -m limit --limit 1/second -j LOG -Filter 569 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 275 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-274 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-274 @@ -5762,7 +3503,7 @@ Filter 569 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-274 -j ACCEPT inet6/filter/limit-274 -j ACCEPT -Filter 570 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 276 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-275 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-275 @@ -5771,7 +3512,7 @@ Filter 570 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-275 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-275 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 571 {"conn-limit":{"interval":5,"log":"none"},"out":"B"} +Filter 277 {"conn-limit":{"interval":5,"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-276 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-276 @@ -5782,7 +3523,7 @@ Filter 571 {"conn-limit":{"interval":5,"log":"none"},"ou inet/filter/limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 572 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"out":"B"} +Filter 278 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-277 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-277 @@ -5793,7 +3534,7 @@ Filter 572 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --set inet6/filter/limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 573 {"conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} +Filter 279 {"conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-278 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-278 @@ -5806,7 +3547,7 @@ Filter 573 {"conn-limit":{"interval":5,"log":"none"},"lo inet/filter/limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 574 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} +Filter 280 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-279 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-279 @@ -5817,7 +3558,7 @@ Filter 574 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 575 {"conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} +Filter 281 {"conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-280 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-280 @@ -5828,7 +3569,7 @@ Filter 575 {"conn-limit":{"interval":5,"log":"none"},"lo inet/filter/limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 576 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} +Filter 282 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-281 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-281 @@ -5839,7 +3580,7 @@ Filter 576 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set inet6/filter/limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 577 {"conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} +Filter 283 {"conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-282 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-282 @@ -5850,7 +3591,7 @@ Filter 577 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 578 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} +Filter 284 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-283 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-283 @@ -5861,7 +3602,7 @@ Filter 578 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 579 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 285 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-284 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-284 @@ -5874,7 +3615,7 @@ Filter 579 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 580 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 286 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-285 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-285 @@ -5885,7 +3626,7 @@ Filter 580 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 581 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 287 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-286 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-286 @@ -5896,7 +3637,7 @@ Filter 581 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 582 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 288 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-287 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-287 @@ -5907,7 +3648,7 @@ Filter 582 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 583 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} +Filter 289 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-288 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-288 @@ -5918,7 +3659,7 @@ Filter 583 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-288 -j ACCEPT inet6/filter/limit-288 -j ACCEPT -Filter 584 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} +Filter 290 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-289 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-289 @@ -5927,7 +3668,7 @@ Filter 584 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-289 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 585 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 291 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-290 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-290 @@ -5940,7 +3681,7 @@ Filter 585 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-290 -j ACCEPT inet6/filter/limit-290 -j ACCEPT -Filter 586 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 292 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-291 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-291 @@ -5951,7 +3692,7 @@ Filter 586 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-291 -m limit --limit 1/second -j LOG inet6/filter/limit-291 -m limit --limit 1/second -j LOG -Filter 587 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 293 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-292 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-292 @@ -5962,7 +3703,7 @@ Filter 587 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-292 -j ACCEPT inet6/filter/limit-292 -j ACCEPT -Filter 588 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 294 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-293 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-293 @@ -5971,7 +3712,7 @@ Filter 588 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 589 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} +Filter 295 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-294 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-294 @@ -5982,7 +3723,7 @@ Filter 589 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 590 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} +Filter 296 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-295 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-295 @@ -5993,7 +3734,7 @@ Filter 590 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 591 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 297 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-296 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-296 @@ -6006,7 +3747,7 @@ Filter 591 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 592 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 298 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-297 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-297 @@ -6017,7 +3758,7 @@ Filter 592 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 593 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 299 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-298 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-298 @@ -6028,7 +3769,7 @@ Filter 593 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 594 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 300 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-299 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-299 @@ -6039,7 +3780,7 @@ Filter 594 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 595 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} +Filter 301 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-300 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-300 @@ -6050,7 +3791,7 @@ Filter 595 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-300 -j ACCEPT inet6/filter/limit-300 -j ACCEPT -Filter 596 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} +Filter 302 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-301 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-301 @@ -6059,7 +3800,7 @@ Filter 596 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-301 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 597 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 303 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-302 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-302 @@ -6072,7 +3813,7 @@ Filter 597 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-302 -j ACCEPT inet6/filter/limit-302 -j ACCEPT -Filter 598 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 304 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-303 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-303 @@ -6083,7 +3824,7 @@ Filter 598 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-303 -m limit --limit 1/second -j LOG inet6/filter/limit-303 -m limit --limit 1/second -j LOG -Filter 599 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 305 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-304 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-304 @@ -6094,7 +3835,7 @@ Filter 599 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-304 -j ACCEPT inet6/filter/limit-304 -j ACCEPT -Filter 600 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 306 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-305 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-305 @@ -6103,7 +3844,7 @@ Filter 600 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-305 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-305 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 601 {"conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} +Filter 307 {"conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-306 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-306 @@ -6114,7 +3855,7 @@ Filter 601 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-306 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 602 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} +Filter 308 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-307 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-307 @@ -6125,7 +3866,7 @@ Filter 602 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-307 -m recent --name user:C --rsource --mask fe00:: --set -Filter 603 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +Filter 309 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-308 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-308 @@ -6138,7 +3879,7 @@ Filter 603 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 604 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +Filter 310 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-309 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-309 @@ -6149,7 +3890,7 @@ Filter 604 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 605 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +Filter 311 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-310 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-310 @@ -6160,7 +3901,7 @@ Filter 605 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 606 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +Filter 312 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-311 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-311 @@ -6171,7 +3912,7 @@ Filter 606 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-311 -m recent --name user:C --rsource --mask fe00:: --set -Filter 607 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} +Filter 313 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-312 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-312 @@ -6182,7 +3923,7 @@ Filter 607 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-312 -j ACCEPT inet6/filter/limit-312 -j ACCEPT -Filter 608 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} +Filter 314 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-313 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-313 @@ -6191,7 +3932,7 @@ Filter 608 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-313 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-313 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 609 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 315 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-314 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-314 @@ -6204,7 +3945,7 @@ Filter 609 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-314 -j ACCEPT inet6/filter/limit-314 -j ACCEPT -Filter 610 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 316 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-315 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-315 @@ -6215,7 +3956,7 @@ Filter 610 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-315 -m limit --limit 1/second -j LOG inet6/filter/limit-315 -m limit --limit 1/second -j LOG -Filter 611 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 317 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-316 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-316 @@ -6226,7 +3967,7 @@ Filter 611 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-316 -j ACCEPT inet6/filter/limit-316 -j ACCEPT -Filter 612 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 318 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-317 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-317 @@ -6235,7 +3976,7 @@ Filter 612 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-317 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-317 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 613 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} +Filter 319 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-318 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-318 @@ -6246,7 +3987,7 @@ Filter 613 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-318 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 614 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} +Filter 320 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-319 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-319 @@ -6257,7 +3998,7 @@ Filter 614 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-319 -m recent --name user:C --rdest --mask fe00:: --set -Filter 615 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +Filter 321 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-320 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-320 @@ -6270,7 +4011,7 @@ Filter 615 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-320 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 616 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +Filter 322 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-321 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-321 @@ -6281,7 +4022,7 @@ Filter 616 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-321 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 617 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +Filter 323 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-322 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-322 @@ -6292,7 +4033,7 @@ Filter 617 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-322 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 618 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +Filter 324 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-323 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-323 @@ -6303,7 +4044,7 @@ Filter 618 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-323 -m recent --name user:C --rdest --mask fe00:: --set -Filter 619 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} +Filter 325 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-324 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-324 @@ -6314,7 +4055,7 @@ Filter 619 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-324 -j ACCEPT inet6/filter/limit-324 -j ACCEPT -Filter 620 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} +Filter 326 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-325 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-325 @@ -6323,7 +4064,7 @@ Filter 620 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-325 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-325 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 621 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 327 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-326 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-326 @@ -6336,7 +4077,7 @@ Filter 621 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-326 -j ACCEPT inet6/filter/limit-326 -j ACCEPT -Filter 622 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 328 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-327 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-327 @@ -6347,7 +4088,7 @@ Filter 622 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-327 -m limit --limit 1/second -j LOG inet6/filter/limit-327 -m limit --limit 1/second -j LOG -Filter 623 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 329 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-328 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-328 @@ -6358,7 +4099,7 @@ Filter 623 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-328 -j ACCEPT inet6/filter/limit-328 -j ACCEPT -Filter 624 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 330 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-329 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-329 @@ -6367,7 +4108,7 @@ Filter 624 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-329 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-329 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 625 {"conn-limit":150,"out":"B"} +Filter 331 {"conn-limit":150,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-330 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-330 @@ -6380,7 +4121,7 @@ Filter 625 {"conn-limit":150,"out":"B"} inet/filter/limit-330 -j DROP inet6/filter/limit-330 -j DROP -Filter 626 {"action":"pass","conn-limit":150,"out":"B"} +Filter 332 {"action":"pass","conn-limit":150,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-331 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-331 @@ -6393,24 +4134,24 @@ Filter 626 {"action":"pass","conn-limit":150,"out":"B"} inet/filter/limit-331 -j DROP inet6/filter/limit-331 -j DROP -Filter 627 {"conn-limit":150,"log":true,"out":"B"} +Filter 333 {"conn-limit":150,"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-332 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-332 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-332 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-332 - inet/filter/limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-63 - inet6/filter/limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-63 - inet/filter/logaccept-63 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-63 -m limit --limit 1/second -j LOG - inet/filter/logaccept-63 -j ACCEPT - inet6/filter/logaccept-63 -j ACCEPT + inet/filter/limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-0 + inet6/filter/limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-0 + inet/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet/filter/logaccept-0 -j ACCEPT + inet6/filter/logaccept-0 -j ACCEPT inet/filter/limit-332 -m limit --limit 1/second -j LOG inet6/filter/limit-332 -m limit --limit 1/second -j LOG inet/filter/limit-332 -j DROP inet6/filter/limit-332 -j DROP -Filter 628 {"conn-limit":150,"log":"none","out":"B"} +Filter 334 {"conn-limit":150,"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-333 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-333 @@ -6423,7 +4164,7 @@ Filter 628 {"conn-limit":150,"log":"none","out":"B"} inet/filter/limit-333 -j DROP inet6/filter/limit-333 -j DROP -Filter 629 {"conn-limit":{"count":150},"out":"B"} +Filter 335 {"conn-limit":{"count":150},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-334 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-334 @@ -6436,7 +4177,7 @@ Filter 629 {"conn-limit":{"count":150},"out":"B"} inet/filter/limit-334 -j DROP inet6/filter/limit-334 -j DROP -Filter 630 {"action":"pass","conn-limit":{"count":150},"out":"B"} +Filter 336 {"action":"pass","conn-limit":{"count":150},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-335 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-335 @@ -6449,24 +4190,24 @@ Filter 630 {"action":"pass","conn-limit":{"count":150}," inet/filter/limit-335 -j DROP inet6/filter/limit-335 -j DROP -Filter 631 {"conn-limit":{"count":150},"log":true,"out":"B"} +Filter 337 {"conn-limit":{"count":150},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-336 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-336 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-336 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-336 - inet/filter/limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-64 - inet6/filter/limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-64 - inet/filter/logaccept-64 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-64 -m limit --limit 1/second -j LOG - inet/filter/logaccept-64 -j ACCEPT - inet6/filter/logaccept-64 -j ACCEPT + inet/filter/limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-1 + inet6/filter/limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-1 + inet/filter/logaccept-1 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-1 -m limit --limit 1/second -j LOG + inet/filter/logaccept-1 -j ACCEPT + inet6/filter/logaccept-1 -j ACCEPT inet/filter/limit-336 -m limit --limit 1/second -j LOG inet6/filter/limit-336 -m limit --limit 1/second -j LOG inet/filter/limit-336 -j DROP inet6/filter/limit-336 -j DROP -Filter 632 {"conn-limit":{"count":150},"log":"none","out":"B"} +Filter 338 {"conn-limit":{"count":150},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-337 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-337 @@ -6479,7 +4220,7 @@ Filter 632 {"conn-limit":{"count":150},"log":"none","out inet/filter/limit-337 -j DROP inet6/filter/limit-337 -j DROP -Filter 633 {"conn-limit":{"count":150,"log":false},"out":"B"} +Filter 339 {"conn-limit":{"count":150,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-338 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-338 @@ -6490,7 +4231,7 @@ Filter 633 {"conn-limit":{"count":150,"log":false},"out" inet/filter/limit-338 -j DROP inet6/filter/limit-338 -j DROP -Filter 634 {"action":"pass","conn-limit":{"count":150,"log":false},"out":"B"} +Filter 340 {"action":"pass","conn-limit":{"count":150,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-339 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-339 @@ -6501,22 +4242,22 @@ Filter 634 {"action":"pass","conn-limit":{"count":150,"l inet/filter/limit-339 -j DROP inet6/filter/limit-339 -j DROP -Filter 635 {"conn-limit":{"count":150,"log":false},"log":true,"out":"B"} +Filter 341 {"conn-limit":{"count":150,"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-340 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-340 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-340 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-340 - inet/filter/limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-65 - inet6/filter/limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-65 - inet/filter/logaccept-65 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-65 -m limit --limit 1/second -j LOG - inet/filter/logaccept-65 -j ACCEPT - inet6/filter/logaccept-65 -j ACCEPT + inet/filter/limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-2 + inet6/filter/limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-2 + inet/filter/logaccept-2 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-2 -m limit --limit 1/second -j LOG + inet/filter/logaccept-2 -j ACCEPT + inet6/filter/logaccept-2 -j ACCEPT inet/filter/limit-340 -j DROP inet6/filter/limit-340 -j DROP -Filter 636 {"conn-limit":{"count":150,"log":false},"log":"none","out":"B"} +Filter 342 {"conn-limit":{"count":150,"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-341 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-341 @@ -6527,7 +4268,7 @@ Filter 636 {"conn-limit":{"count":150,"log":false},"log" inet/filter/limit-341 -j DROP inet6/filter/limit-341 -j DROP -Filter 637 {"conn-limit":{"count":150,"log":"none"},"out":"B"} +Filter 343 {"conn-limit":{"count":150,"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-342 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-342 @@ -6538,7 +4279,7 @@ Filter 637 {"conn-limit":{"count":150,"log":"none"},"out inet/filter/limit-342 -j DROP inet6/filter/limit-342 -j DROP -Filter 638 {"action":"pass","conn-limit":{"count":150,"log":"none"},"out":"B"} +Filter 344 {"action":"pass","conn-limit":{"count":150,"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-343 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-343 @@ -6549,22 +4290,22 @@ Filter 638 {"action":"pass","conn-limit":{"count":150,"l inet/filter/limit-343 -j DROP inet6/filter/limit-343 -j DROP -Filter 639 {"conn-limit":{"count":150,"log":"none"},"log":true,"out":"B"} +Filter 345 {"conn-limit":{"count":150,"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-344 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-344 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-344 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-344 - inet/filter/limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-66 - inet6/filter/limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-66 - inet/filter/logaccept-66 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-66 -m limit --limit 1/second -j LOG - inet/filter/logaccept-66 -j ACCEPT - inet6/filter/logaccept-66 -j ACCEPT + inet/filter/limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-3 + inet6/filter/limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-3 + inet/filter/logaccept-3 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-3 -m limit --limit 1/second -j LOG + inet/filter/logaccept-3 -j ACCEPT + inet6/filter/logaccept-3 -j ACCEPT inet/filter/limit-344 -j DROP inet6/filter/limit-344 -j DROP -Filter 640 {"conn-limit":{"count":150,"log":"none"},"log":"none","out":"B"} +Filter 346 {"conn-limit":{"count":150,"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-345 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-345 @@ -6575,7 +4316,7 @@ Filter 640 {"conn-limit":{"count":150,"log":"none"},"log inet/filter/limit-345 -j DROP inet6/filter/limit-345 -j DROP -Filter 641 {"conn-limit":{"count":150,"interval":5},"out":"B"} +Filter 347 {"conn-limit":{"count":150,"interval":5},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-346 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-346 @@ -6588,7 +4329,7 @@ Filter 641 {"conn-limit":{"count":150,"interval":5},"out inet/filter/limit-346 -j DROP inet6/filter/limit-346 -j DROP -Filter 642 {"action":"pass","conn-limit":{"count":150,"interval":5},"out":"B"} +Filter 348 {"action":"pass","conn-limit":{"count":150,"interval":5},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-347 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-347 @@ -6601,24 +4342,24 @@ Filter 642 {"action":"pass","conn-limit":{"count":150,"i inet/filter/limit-347 -j DROP inet6/filter/limit-347 -j DROP -Filter 643 {"conn-limit":{"count":150,"interval":5},"log":true,"out":"B"} +Filter 349 {"conn-limit":{"count":150,"interval":5},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-348 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-348 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-348 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-348 - inet/filter/limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-67 - inet6/filter/limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-67 - inet/filter/logaccept-67 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-67 -m limit --limit 1/second -j LOG - inet/filter/logaccept-67 -j ACCEPT - inet6/filter/logaccept-67 -j ACCEPT + inet/filter/limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-4 + inet6/filter/limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-4 + inet/filter/logaccept-4 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-4 -m limit --limit 1/second -j LOG + inet/filter/logaccept-4 -j ACCEPT + inet6/filter/logaccept-4 -j ACCEPT inet/filter/limit-348 -m limit --limit 1/second -j LOG inet6/filter/limit-348 -m limit --limit 1/second -j LOG inet/filter/limit-348 -j DROP inet6/filter/limit-348 -j DROP -Filter 644 {"conn-limit":{"count":150,"interval":5},"log":"none","out":"B"} +Filter 350 {"conn-limit":{"count":150,"interval":5},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-349 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-349 @@ -6631,7 +4372,7 @@ Filter 644 {"conn-limit":{"count":150,"interval":5},"log inet/filter/limit-349 -j DROP inet6/filter/limit-349 -j DROP -Filter 645 {"conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} +Filter 351 {"conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-350 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-350 @@ -6642,7 +4383,7 @@ Filter 645 {"conn-limit":{"count":150,"interval":5,"log" inet/filter/limit-350 -j DROP inet6/filter/limit-350 -j DROP -Filter 646 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} +Filter 352 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-351 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-351 @@ -6653,22 +4394,22 @@ Filter 646 {"action":"pass","conn-limit":{"count":150,"i inet/filter/limit-351 -j DROP inet6/filter/limit-351 -j DROP -Filter 647 {"conn-limit":{"count":150,"interval":5,"log":false},"log":true,"out":"B"} +Filter 353 {"conn-limit":{"count":150,"interval":5,"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-352 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-352 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-352 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-352 - inet/filter/limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-68 - inet6/filter/limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-68 - inet/filter/logaccept-68 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-68 -m limit --limit 1/second -j LOG - inet/filter/logaccept-68 -j ACCEPT - inet6/filter/logaccept-68 -j ACCEPT + inet/filter/limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-5 + inet6/filter/limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-5 + inet/filter/logaccept-5 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-5 -m limit --limit 1/second -j LOG + inet/filter/logaccept-5 -j ACCEPT + inet6/filter/logaccept-5 -j ACCEPT inet/filter/limit-352 -j DROP inet6/filter/limit-352 -j DROP -Filter 648 {"conn-limit":{"count":150,"interval":5,"log":false},"log":"none","out":"B"} +Filter 354 {"conn-limit":{"count":150,"interval":5,"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-353 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-353 @@ -6679,7 +4420,7 @@ Filter 648 {"conn-limit":{"count":150,"interval":5,"log" inet/filter/limit-353 -j DROP inet6/filter/limit-353 -j DROP -Filter 649 {"conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} +Filter 355 {"conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-354 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-354 @@ -6690,7 +4431,7 @@ Filter 649 {"conn-limit":{"count":150,"interval":5,"log" inet/filter/limit-354 -j DROP inet6/filter/limit-354 -j DROP -Filter 650 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} +Filter 356 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-355 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-355 @@ -6701,22 +4442,22 @@ Filter 650 {"action":"pass","conn-limit":{"count":150,"i inet/filter/limit-355 -j DROP inet6/filter/limit-355 -j DROP -Filter 651 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":true,"out":"B"} +Filter 357 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-356 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-356 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-356 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-356 - inet/filter/limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-69 - inet6/filter/limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-69 - inet/filter/logaccept-69 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-69 -m limit --limit 1/second -j LOG - inet/filter/logaccept-69 -j ACCEPT - inet6/filter/logaccept-69 -j ACCEPT + inet/filter/limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-6 + inet6/filter/limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-6 + inet/filter/logaccept-6 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-6 -m limit --limit 1/second -j LOG + inet/filter/logaccept-6 -j ACCEPT + inet6/filter/logaccept-6 -j ACCEPT inet/filter/limit-356 -j DROP inet6/filter/limit-356 -j DROP -Filter 652 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":"none","out":"B"} +Filter 358 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-357 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-357 @@ -6727,775 +4468,775 @@ Filter 652 {"conn-limit":{"count":150,"interval":5,"log" inet/filter/limit-357 -j DROP inet6/filter/limit-357 -j DROP -Filter 653 {"conn-limit":1,"in":"_fw","out":"B"} +Filter 359 {"conn-limit":1,"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-358 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-358 - inet/filter/limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 - inet6/filter/limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 - inet/filter/logdrop-115 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-115 -m limit --limit 1/second -j LOG - inet/filter/logdrop-115 -j DROP - inet6/filter/logdrop-115 -j DROP + inet/filter/limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-114 + inet6/filter/limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-114 + inet/filter/logdrop-114 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-114 -m limit --limit 1/second -j LOG + inet/filter/logdrop-114 -j DROP + inet6/filter/logdrop-114 -j DROP inet/filter/limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 654 {"action":"pass","conn-limit":1,"in":"_fw","out":"B"} +Filter 360 {"action":"pass","conn-limit":1,"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-359 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-359 - inet/filter/limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 - inet6/filter/limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 - inet/filter/logdrop-116 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-116 -m limit --limit 1/second -j LOG - inet/filter/logdrop-116 -j DROP - inet6/filter/logdrop-116 -j DROP + inet/filter/limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 + inet6/filter/limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 + inet/filter/logdrop-115 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-115 -m limit --limit 1/second -j LOG + inet/filter/logdrop-115 -j DROP + inet6/filter/logdrop-115 -j DROP inet/filter/limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --set inet6/filter/limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 655 {"conn-limit":1,"in":"_fw","log":true,"out":"B"} +Filter 361 {"conn-limit":1,"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-360 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-360 - inet/filter/limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 - inet6/filter/limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 - inet/filter/logdrop-117 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-117 -m limit --limit 1/second -j LOG - inet/filter/logdrop-117 -j DROP - inet6/filter/logdrop-117 -j DROP + inet/filter/limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 + inet6/filter/limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 + inet/filter/logdrop-116 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-116 -m limit --limit 1/second -j LOG + inet/filter/logdrop-116 -j DROP + inet6/filter/logdrop-116 -j DROP inet/filter/limit-360 -m limit --limit 1/second -j LOG inet6/filter/limit-360 -m limit --limit 1/second -j LOG inet/filter/limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 656 {"action":"pass","conn-limit":1,"in":"_fw","log":true,"out":"B"} +Filter 362 {"action":"pass","conn-limit":1,"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-361 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-361 - inet/filter/limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 - inet6/filter/limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 - inet/filter/logdrop-118 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-118 -m limit --limit 1/second -j LOG - inet/filter/logdrop-118 -j DROP - inet6/filter/logdrop-118 -j DROP + inet/filter/limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 + inet6/filter/limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 + inet/filter/logdrop-117 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-117 -m limit --limit 1/second -j LOG + inet/filter/logdrop-117 -j DROP + inet6/filter/logdrop-117 -j DROP inet/filter/limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 657 {"conn-limit":1,"in":"_fw","log":"none","out":"B"} +Filter 363 {"conn-limit":1,"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-362 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-362 - inet/filter/limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 - inet6/filter/limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 - inet/filter/logdrop-119 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-119 -m limit --limit 1/second -j LOG - inet/filter/logdrop-119 -j DROP - inet6/filter/logdrop-119 -j DROP + inet/filter/limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 + inet6/filter/limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 + inet/filter/logdrop-118 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-118 -m limit --limit 1/second -j LOG + inet/filter/logdrop-118 -j DROP + inet6/filter/logdrop-118 -j DROP inet/filter/limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 658 {"action":"pass","conn-limit":1,"in":"_fw","log":"none","out":"B"} +Filter 364 {"action":"pass","conn-limit":1,"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-363 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-363 - inet/filter/limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-120 - inet6/filter/limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-120 - inet/filter/logdrop-120 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-120 -m limit --limit 1/second -j LOG - inet/filter/logdrop-120 -j DROP - inet6/filter/logdrop-120 -j DROP + inet/filter/limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 + inet6/filter/limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 + inet/filter/logdrop-119 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-119 -m limit --limit 1/second -j LOG + inet/filter/logdrop-119 -j DROP + inet6/filter/logdrop-119 -j DROP inet/filter/limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --set inet6/filter/limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 659 {"conn-limit":{},"in":"_fw","out":"B"} +Filter 365 {"conn-limit":{},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-364 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-364 - inet/filter/limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-121 - inet6/filter/limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-121 - inet/filter/logdrop-121 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-121 -m limit --limit 1/second -j LOG - inet/filter/logdrop-121 -j DROP - inet6/filter/logdrop-121 -j DROP + inet/filter/limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-120 + inet6/filter/limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-120 + inet/filter/logdrop-120 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-120 -m limit --limit 1/second -j LOG + inet/filter/logdrop-120 -j DROP + inet6/filter/logdrop-120 -j DROP inet/filter/limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 660 {"action":"pass","conn-limit":{},"in":"_fw","out":"B"} +Filter 366 {"action":"pass","conn-limit":{},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-365 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-365 - inet/filter/limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-122 - inet6/filter/limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-122 - inet/filter/logdrop-122 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-122 -m limit --limit 1/second -j LOG - inet/filter/logdrop-122 -j DROP - inet6/filter/logdrop-122 -j DROP + inet/filter/limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-121 + inet6/filter/limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-121 + inet/filter/logdrop-121 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-121 -m limit --limit 1/second -j LOG + inet/filter/logdrop-121 -j DROP + inet6/filter/logdrop-121 -j DROP inet/filter/limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --set inet6/filter/limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 661 {"conn-limit":{},"in":"_fw","log":true,"out":"B"} +Filter 367 {"conn-limit":{},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-366 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-366 - inet/filter/limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-123 - inet6/filter/limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-123 - inet/filter/logdrop-123 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-123 -m limit --limit 1/second -j LOG - inet/filter/logdrop-123 -j DROP - inet6/filter/logdrop-123 -j DROP + inet/filter/limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-122 + inet6/filter/limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-122 + inet/filter/logdrop-122 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-122 -m limit --limit 1/second -j LOG + inet/filter/logdrop-122 -j DROP + inet6/filter/logdrop-122 -j DROP inet/filter/limit-366 -m limit --limit 1/second -j LOG inet6/filter/limit-366 -m limit --limit 1/second -j LOG inet/filter/limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 662 {"action":"pass","conn-limit":{},"in":"_fw","log":true,"out":"B"} +Filter 368 {"action":"pass","conn-limit":{},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-367 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-367 - inet/filter/limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-124 - inet6/filter/limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-124 - inet/filter/logdrop-124 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-124 -m limit --limit 1/second -j LOG - inet/filter/logdrop-124 -j DROP - inet6/filter/logdrop-124 -j DROP + inet/filter/limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-123 + inet6/filter/limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-123 + inet/filter/logdrop-123 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-123 -m limit --limit 1/second -j LOG + inet/filter/logdrop-123 -j DROP + inet6/filter/logdrop-123 -j DROP inet/filter/limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 663 {"conn-limit":{},"in":"_fw","log":"none","out":"B"} +Filter 369 {"conn-limit":{},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-368 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-368 - inet/filter/limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-125 - inet6/filter/limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-125 - inet/filter/logdrop-125 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-125 -m limit --limit 1/second -j LOG - inet/filter/logdrop-125 -j DROP - inet6/filter/logdrop-125 -j DROP + inet/filter/limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-124 + inet6/filter/limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-124 + inet/filter/logdrop-124 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-124 -m limit --limit 1/second -j LOG + inet/filter/logdrop-124 -j DROP + inet6/filter/logdrop-124 -j DROP inet/filter/limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 664 {"action":"pass","conn-limit":{},"in":"_fw","log":"none","out":"B"} +Filter 370 {"action":"pass","conn-limit":{},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-369 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-369 - inet/filter/limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-126 - inet6/filter/limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-126 - inet/filter/logdrop-126 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-126 -m limit --limit 1/second -j LOG - inet/filter/logdrop-126 -j DROP - inet6/filter/logdrop-126 -j DROP + inet/filter/limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-125 + inet6/filter/limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-125 + inet/filter/logdrop-125 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-125 -m limit --limit 1/second -j LOG + inet/filter/logdrop-125 -j DROP + inet6/filter/logdrop-125 -j DROP inet/filter/limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --set inet6/filter/limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 665 {"conn-limit":{"name":"A"},"in":"_fw","out":"B"} +Filter 371 {"conn-limit":{"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-370 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-370 - inet/filter/limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-127 - inet6/filter/limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-127 - inet/filter/logdrop-127 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-127 -m limit --limit 1/second -j LOG - inet/filter/logdrop-127 -j DROP - inet6/filter/logdrop-127 -j DROP + inet/filter/limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-126 + inet6/filter/limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-126 + inet/filter/logdrop-126 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-126 -m limit --limit 1/second -j LOG + inet/filter/logdrop-126 -j DROP + inet6/filter/logdrop-126 -j DROP inet/filter/limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 666 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","out":"B"} +Filter 372 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-371 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-371 - inet/filter/limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-128 - inet6/filter/limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-128 - inet/filter/logdrop-128 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-128 -m limit --limit 1/second -j LOG - inet/filter/logdrop-128 -j DROP - inet6/filter/logdrop-128 -j DROP + inet/filter/limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-127 + inet6/filter/limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-127 + inet/filter/logdrop-127 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-127 -m limit --limit 1/second -j LOG + inet/filter/logdrop-127 -j DROP + inet6/filter/logdrop-127 -j DROP inet/filter/limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 667 {"conn-limit":{"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 373 {"conn-limit":{"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-372 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-372 - inet/filter/limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-129 - inet6/filter/limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-129 - inet/filter/logdrop-129 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-129 -m limit --limit 1/second -j LOG - inet/filter/logdrop-129 -j DROP - inet6/filter/logdrop-129 -j DROP + inet/filter/limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-128 + inet6/filter/limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-128 + inet/filter/logdrop-128 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-128 -m limit --limit 1/second -j LOG + inet/filter/logdrop-128 -j DROP + inet6/filter/logdrop-128 -j DROP inet/filter/limit-372 -m limit --limit 1/second -j LOG inet6/filter/limit-372 -m limit --limit 1/second -j LOG inet/filter/limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 668 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 374 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-373 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-373 - inet/filter/limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 - inet6/filter/limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 - inet/filter/logdrop-130 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-130 -m limit --limit 1/second -j LOG - inet/filter/logdrop-130 -j DROP - inet6/filter/logdrop-130 -j DROP + inet/filter/limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-129 + inet6/filter/limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-129 + inet/filter/logdrop-129 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-129 -m limit --limit 1/second -j LOG + inet/filter/logdrop-129 -j DROP + inet6/filter/logdrop-129 -j DROP inet/filter/limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 669 {"conn-limit":{"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 375 {"conn-limit":{"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-374 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-374 - inet/filter/limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 - inet6/filter/limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 - inet/filter/logdrop-131 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-131 -m limit --limit 1/second -j LOG - inet/filter/logdrop-131 -j DROP - inet6/filter/logdrop-131 -j DROP + inet/filter/limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 + inet6/filter/limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 + inet/filter/logdrop-130 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-130 -m limit --limit 1/second -j LOG + inet/filter/logdrop-130 -j DROP + inet6/filter/logdrop-130 -j DROP inet/filter/limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 670 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 376 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-375 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-375 - inet/filter/limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-132 - inet6/filter/limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-132 - inet/filter/logdrop-132 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-132 -m limit --limit 1/second -j LOG - inet/filter/logdrop-132 -j DROP - inet6/filter/logdrop-132 -j DROP + inet/filter/limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 + inet6/filter/limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 + inet/filter/logdrop-131 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-131 -m limit --limit 1/second -j LOG + inet/filter/logdrop-131 -j DROP + inet6/filter/logdrop-131 -j DROP inet/filter/limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 671 {"conn-limit":{"name":"A","update":false},"in":"_fw","out":"B"} +Filter 377 {"conn-limit":{"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-376 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-376 - inet/filter/limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 - inet6/filter/limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-133 + inet/filter/limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-132 + inet6/filter/limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-132 + inet/filter/logdrop-132 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-132 -m limit --limit 1/second -j LOG + inet/filter/logdrop-132 -j DROP + inet6/filter/logdrop-132 -j DROP + inet/filter/limit-376 -j ACCEPT + inet6/filter/limit-376 -j ACCEPT + +Filter 378 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-133 inet/filter/logdrop-133 -m limit --limit 1/second -j LOG inet6/filter/logdrop-133 -m limit --limit 1/second -j LOG inet/filter/logdrop-133 -j DROP inet6/filter/logdrop-133 -j DROP - inet/filter/limit-376 -j ACCEPT - inet6/filter/limit-376 -j ACCEPT -Filter 672 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","out":"B"} +Filter 379 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-134 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-378 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-378 + inet/filter/limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 + inet6/filter/limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-134 inet/filter/logdrop-134 -m limit --limit 1/second -j LOG inet6/filter/logdrop-134 -m limit --limit 1/second -j LOG inet/filter/logdrop-134 -j DROP inet6/filter/logdrop-134 -j DROP - -Filter 673 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-378 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-378 - inet/filter/limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 - inet6/filter/limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-135 - inet/filter/logdrop-135 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-135 -m limit --limit 1/second -j LOG - inet/filter/logdrop-135 -j DROP - inet6/filter/logdrop-135 -j DROP inet/filter/limit-378 -m limit --limit 1/second -j LOG inet6/filter/limit-378 -m limit --limit 1/second -j LOG inet/filter/limit-378 -j ACCEPT inet6/filter/limit-378 -j ACCEPT -Filter 674 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 380 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-379 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-379 - inet/filter/limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-136 - inet6/filter/limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-136 - inet/filter/logdrop-136 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-136 -m limit --limit 1/second -j LOG - inet/filter/logdrop-136 -j DROP - inet6/filter/logdrop-136 -j DROP + inet/filter/limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 + inet6/filter/limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-135 + inet/filter/logdrop-135 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-135 -m limit --limit 1/second -j LOG + inet/filter/logdrop-135 -j DROP + inet6/filter/logdrop-135 -j DROP inet/filter/limit-379 -m limit --limit 1/second -j LOG inet6/filter/limit-379 -m limit --limit 1/second -j LOG -Filter 675 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 381 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-380 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-380 - inet/filter/limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-137 - inet6/filter/limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-137 + inet/filter/limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-136 + inet6/filter/limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-136 + inet/filter/logdrop-136 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-136 -m limit --limit 1/second -j LOG + inet/filter/logdrop-136 -j DROP + inet6/filter/logdrop-136 -j DROP + inet/filter/limit-380 -j ACCEPT + inet6/filter/limit-380 -j ACCEPT + +Filter 382 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-137 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-137 inet/filter/logdrop-137 -m limit --limit 1/second -j LOG inet6/filter/logdrop-137 -m limit --limit 1/second -j LOG inet/filter/logdrop-137 -j DROP inet6/filter/logdrop-137 -j DROP - inet/filter/limit-380 -j ACCEPT - inet6/filter/limit-380 -j ACCEPT -Filter 676 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 383 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-138 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-138 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-382 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-382 + inet/filter/limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-138 + inet6/filter/limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-138 inet/filter/logdrop-138 -m limit --limit 1/second -j LOG inet6/filter/logdrop-138 -m limit --limit 1/second -j LOG inet/filter/logdrop-138 -j DROP inet6/filter/logdrop-138 -j DROP - -Filter 677 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-382 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-382 - inet/filter/limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 - inet6/filter/limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 - inet/filter/logdrop-139 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-139 -m limit --limit 1/second -j LOG - inet/filter/logdrop-139 -j DROP - inet6/filter/logdrop-139 -j DROP inet/filter/limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 678 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","out":"B"} +Filter 384 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-383 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-383 - inet/filter/limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 - inet6/filter/limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 - inet/filter/logdrop-140 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-140 -m limit --limit 1/second -j LOG - inet/filter/logdrop-140 -j DROP - inet6/filter/logdrop-140 -j DROP + inet/filter/limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 + inet6/filter/limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 + inet/filter/logdrop-139 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-139 -m limit --limit 1/second -j LOG + inet/filter/logdrop-139 -j DROP + inet6/filter/logdrop-139 -j DROP inet/filter/limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 679 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 385 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-384 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-384 - inet/filter/limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 - inet6/filter/limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 - inet/filter/logdrop-141 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-141 -m limit --limit 1/second -j LOG - inet/filter/logdrop-141 -j DROP - inet6/filter/logdrop-141 -j DROP + inet/filter/limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 + inet6/filter/limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 + inet/filter/logdrop-140 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-140 -m limit --limit 1/second -j LOG + inet/filter/logdrop-140 -j DROP + inet6/filter/logdrop-140 -j DROP inet/filter/limit-384 -m limit --limit 1/second -j LOG inet6/filter/limit-384 -m limit --limit 1/second -j LOG inet/filter/limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 680 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 386 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-385 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-385 - inet/filter/limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 - inet6/filter/limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 - inet/filter/logdrop-142 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-142 -m limit --limit 1/second -j LOG - inet/filter/logdrop-142 -j DROP - inet6/filter/logdrop-142 -j DROP + inet/filter/limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 + inet6/filter/limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 + inet/filter/logdrop-141 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-141 -m limit --limit 1/second -j LOG + inet/filter/logdrop-141 -j DROP + inet6/filter/logdrop-141 -j DROP inet/filter/limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 681 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 387 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-386 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-386 - inet/filter/limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 - inet6/filter/limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 - inet/filter/logdrop-143 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-143 -m limit --limit 1/second -j LOG - inet/filter/logdrop-143 -j DROP - inet6/filter/logdrop-143 -j DROP + inet/filter/limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 + inet6/filter/limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 + inet/filter/logdrop-142 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-142 -m limit --limit 1/second -j LOG + inet/filter/logdrop-142 -j DROP + inet6/filter/logdrop-142 -j DROP inet/filter/limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 682 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 388 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-387 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-387 - inet/filter/limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-144 - inet6/filter/limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-144 - inet/filter/logdrop-144 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-144 -m limit --limit 1/second -j LOG - inet/filter/logdrop-144 -j DROP - inet6/filter/logdrop-144 -j DROP + inet/filter/limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 + inet6/filter/limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 + inet/filter/logdrop-143 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-143 -m limit --limit 1/second -j LOG + inet/filter/logdrop-143 -j DROP + inet6/filter/logdrop-143 -j DROP inet/filter/limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 683 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","out":"B"} +Filter 389 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-388 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-388 - inet/filter/limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 - inet6/filter/limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 + inet/filter/limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-144 + inet6/filter/limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-144 + inet/filter/logdrop-144 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-144 -m limit --limit 1/second -j LOG + inet/filter/logdrop-144 -j DROP + inet6/filter/logdrop-144 -j DROP + inet/filter/limit-388 -j ACCEPT + inet6/filter/limit-388 -j ACCEPT + +Filter 390 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 inet/filter/logdrop-145 -m limit --limit 1/second -j LOG inet6/filter/logdrop-145 -m limit --limit 1/second -j LOG inet/filter/logdrop-145 -j DROP inet6/filter/logdrop-145 -j DROP - inet/filter/limit-388 -j ACCEPT - inet6/filter/limit-388 -j ACCEPT -Filter 684 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","out":"B"} +Filter 391 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-390 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-390 + inet/filter/limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 + inet6/filter/limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 inet/filter/logdrop-146 -m limit --limit 1/second -j LOG inet6/filter/logdrop-146 -m limit --limit 1/second -j LOG inet/filter/logdrop-146 -j DROP inet6/filter/logdrop-146 -j DROP - -Filter 685 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-390 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-390 - inet/filter/limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 - inet6/filter/limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 - inet/filter/logdrop-147 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-147 -m limit --limit 1/second -j LOG - inet/filter/logdrop-147 -j DROP - inet6/filter/logdrop-147 -j DROP inet/filter/limit-390 -m limit --limit 1/second -j LOG inet6/filter/limit-390 -m limit --limit 1/second -j LOG inet/filter/limit-390 -j ACCEPT inet6/filter/limit-390 -j ACCEPT -Filter 686 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 392 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-391 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-391 - inet/filter/limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 - inet6/filter/limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 - inet/filter/logdrop-148 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-148 -m limit --limit 1/second -j LOG - inet/filter/logdrop-148 -j DROP - inet6/filter/logdrop-148 -j DROP + inet/filter/limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 + inet6/filter/limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 + inet/filter/logdrop-147 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-147 -m limit --limit 1/second -j LOG + inet/filter/logdrop-147 -j DROP + inet6/filter/logdrop-147 -j DROP inet/filter/limit-391 -m limit --limit 1/second -j LOG inet6/filter/limit-391 -m limit --limit 1/second -j LOG -Filter 687 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 393 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-392 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-392 - inet/filter/limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 - inet6/filter/limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 + inet/filter/limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 + inet6/filter/limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 + inet/filter/logdrop-148 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-148 -m limit --limit 1/second -j LOG + inet/filter/logdrop-148 -j DROP + inet6/filter/logdrop-148 -j DROP + inet/filter/limit-392 -j ACCEPT + inet6/filter/limit-392 -j ACCEPT + +Filter 394 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 inet/filter/logdrop-149 -m limit --limit 1/second -j LOG inet6/filter/logdrop-149 -m limit --limit 1/second -j LOG inet/filter/logdrop-149 -j DROP inet6/filter/logdrop-149 -j DROP - inet/filter/limit-392 -j ACCEPT - inet6/filter/limit-392 -j ACCEPT -Filter 688 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 395 {"conn-limit":{"name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-150 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-150 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-394 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-394 + inet/filter/limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-150 + inet6/filter/limit-394 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-150 inet/filter/logdrop-150 -m limit --limit 1/second -j LOG inet6/filter/logdrop-150 -m limit --limit 1/second -j LOG inet/filter/logdrop-150 -j DROP inet6/filter/logdrop-150 -j DROP - -Filter 689 {"conn-limit":{"name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-394 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-394 - inet/filter/limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 - inet6/filter/limit-394 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 - inet/filter/logdrop-151 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-151 -m limit --limit 1/second -j LOG - inet/filter/logdrop-151 -j DROP - inet6/filter/logdrop-151 -j DROP inet/filter/limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-394 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 690 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","out":"B"} +Filter 396 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-395 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-395 - inet/filter/limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 - inet6/filter/limit-395 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 - inet/filter/logdrop-152 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-152 -m limit --limit 1/second -j LOG - inet/filter/logdrop-152 -j DROP - inet6/filter/logdrop-152 -j DROP + inet/filter/limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 + inet6/filter/limit-395 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 + inet/filter/logdrop-151 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-151 -m limit --limit 1/second -j LOG + inet/filter/logdrop-151 -j DROP + inet6/filter/logdrop-151 -j DROP inet/filter/limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-395 -m recent --name user:C --rsource --mask fe00:: --set -Filter 691 {"conn-limit":{"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 397 {"conn-limit":{"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-396 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-396 - inet/filter/limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 - inet6/filter/limit-396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 - inet/filter/logdrop-153 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-153 -m limit --limit 1/second -j LOG - inet/filter/logdrop-153 -j DROP - inet6/filter/logdrop-153 -j DROP + inet/filter/limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 + inet6/filter/limit-396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 + inet/filter/logdrop-152 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-152 -m limit --limit 1/second -j LOG + inet/filter/logdrop-152 -j DROP + inet6/filter/logdrop-152 -j DROP inet/filter/limit-396 -m limit --limit 1/second -j LOG inet6/filter/limit-396 -m limit --limit 1/second -j LOG inet/filter/limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-396 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 692 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 398 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-397 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-397 - inet/filter/limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 - inet6/filter/limit-397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 - inet/filter/logdrop-154 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-154 -m limit --limit 1/second -j LOG - inet/filter/logdrop-154 -j DROP - inet6/filter/logdrop-154 -j DROP + inet/filter/limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 + inet6/filter/limit-397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 + inet/filter/logdrop-153 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-153 -m limit --limit 1/second -j LOG + inet/filter/logdrop-153 -j DROP + inet6/filter/logdrop-153 -j DROP inet/filter/limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-397 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 693 {"conn-limit":{"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 399 {"conn-limit":{"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-398 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-398 - inet/filter/limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 - inet6/filter/limit-398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 - inet/filter/logdrop-155 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-155 -m limit --limit 1/second -j LOG - inet/filter/logdrop-155 -j DROP - inet6/filter/logdrop-155 -j DROP + inet/filter/limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 + inet6/filter/limit-398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 + inet/filter/logdrop-154 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-154 -m limit --limit 1/second -j LOG + inet/filter/logdrop-154 -j DROP + inet6/filter/logdrop-154 -j DROP inet/filter/limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-398 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 694 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 400 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-399 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-399 - inet/filter/limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-156 - inet6/filter/limit-399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-156 - inet/filter/logdrop-156 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-156 -m limit --limit 1/second -j LOG - inet/filter/logdrop-156 -j DROP - inet6/filter/logdrop-156 -j DROP + inet/filter/limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 + inet6/filter/limit-399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 + inet/filter/logdrop-155 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-155 -m limit --limit 1/second -j LOG + inet/filter/logdrop-155 -j DROP + inet6/filter/logdrop-155 -j DROP inet/filter/limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-399 -m recent --name user:C --rsource --mask fe00:: --set -Filter 695 {"conn-limit":{"name":"C","update":false},"in":"_fw","out":"B"} +Filter 401 {"conn-limit":{"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-400 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-400 - inet/filter/limit-400 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-157 - inet6/filter/limit-400 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-157 + inet/filter/limit-400 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-156 + inet6/filter/limit-400 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-156 + inet/filter/logdrop-156 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-156 -m limit --limit 1/second -j LOG + inet/filter/logdrop-156 -j DROP + inet6/filter/logdrop-156 -j DROP + inet/filter/limit-400 -j ACCEPT + inet6/filter/limit-400 -j ACCEPT + +Filter 402 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-157 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-157 inet/filter/logdrop-157 -m limit --limit 1/second -j LOG inet6/filter/logdrop-157 -m limit --limit 1/second -j LOG inet/filter/logdrop-157 -j DROP inet6/filter/logdrop-157 -j DROP - inet/filter/limit-400 -j ACCEPT - inet6/filter/limit-400 -j ACCEPT -Filter 696 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","out":"B"} +Filter 403 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-158 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-158 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-402 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-402 + inet/filter/limit-402 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-158 + inet6/filter/limit-402 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-158 inet/filter/logdrop-158 -m limit --limit 1/second -j LOG inet6/filter/logdrop-158 -m limit --limit 1/second -j LOG inet/filter/logdrop-158 -j DROP inet6/filter/logdrop-158 -j DROP - -Filter 697 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-402 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-402 - inet/filter/limit-402 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-159 - inet6/filter/limit-402 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-159 - inet/filter/logdrop-159 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-159 -m limit --limit 1/second -j LOG - inet/filter/logdrop-159 -j DROP - inet6/filter/logdrop-159 -j DROP inet/filter/limit-402 -m limit --limit 1/second -j LOG inet6/filter/limit-402 -m limit --limit 1/second -j LOG inet/filter/limit-402 -j ACCEPT inet6/filter/limit-402 -j ACCEPT -Filter 698 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 404 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-403 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-403 - inet/filter/limit-403 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 - inet6/filter/limit-403 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 - inet/filter/logdrop-160 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-160 -m limit --limit 1/second -j LOG - inet/filter/logdrop-160 -j DROP - inet6/filter/logdrop-160 -j DROP + inet/filter/limit-403 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-159 + inet6/filter/limit-403 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-159 + inet/filter/logdrop-159 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-159 -m limit --limit 1/second -j LOG + inet/filter/logdrop-159 -j DROP + inet6/filter/logdrop-159 -j DROP inet/filter/limit-403 -m limit --limit 1/second -j LOG inet6/filter/limit-403 -m limit --limit 1/second -j LOG -Filter 699 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 405 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-404 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-404 - inet/filter/limit-404 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 - inet6/filter/limit-404 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 + inet/filter/limit-404 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 + inet6/filter/limit-404 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 + inet/filter/logdrop-160 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-160 -m limit --limit 1/second -j LOG + inet/filter/logdrop-160 -j DROP + inet6/filter/logdrop-160 -j DROP + inet/filter/limit-404 -j ACCEPT + inet6/filter/limit-404 -j ACCEPT + +Filter 406 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 inet/filter/logdrop-161 -m limit --limit 1/second -j LOG inet6/filter/logdrop-161 -m limit --limit 1/second -j LOG inet/filter/logdrop-161 -j DROP inet6/filter/logdrop-161 -j DROP - inet/filter/limit-404 -j ACCEPT - inet6/filter/limit-404 -j ACCEPT -Filter 700 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 407 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-162 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-162 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-406 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-406 + inet/filter/limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-162 + inet6/filter/limit-406 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-162 inet/filter/logdrop-162 -m limit --limit 1/second -j LOG inet6/filter/logdrop-162 -m limit --limit 1/second -j LOG inet/filter/logdrop-162 -j DROP inet6/filter/logdrop-162 -j DROP - -Filter 701 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-406 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-406 - inet/filter/limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-163 - inet6/filter/limit-406 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-163 - inet/filter/logdrop-163 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-163 -m limit --limit 1/second -j LOG - inet/filter/logdrop-163 -j DROP - inet6/filter/logdrop-163 -j DROP inet/filter/limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-406 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 702 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","out":"B"} +Filter 408 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-407 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-407 - inet/filter/limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-164 - inet6/filter/limit-407 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-164 - inet/filter/logdrop-164 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-164 -m limit --limit 1/second -j LOG - inet/filter/logdrop-164 -j DROP - inet6/filter/logdrop-164 -j DROP + inet/filter/limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-163 + inet6/filter/limit-407 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-163 + inet/filter/logdrop-163 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-163 -m limit --limit 1/second -j LOG + inet/filter/logdrop-163 -j DROP + inet6/filter/logdrop-163 -j DROP inet/filter/limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-407 -m recent --name user:C --rdest --mask fe00:: --set -Filter 703 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 409 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-408 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-408 - inet/filter/limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-165 - inet6/filter/limit-408 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-165 - inet/filter/logdrop-165 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-165 -m limit --limit 1/second -j LOG - inet/filter/logdrop-165 -j DROP - inet6/filter/logdrop-165 -j DROP + inet/filter/limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-164 + inet6/filter/limit-408 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-164 + inet/filter/logdrop-164 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-164 -m limit --limit 1/second -j LOG + inet/filter/logdrop-164 -j DROP + inet6/filter/logdrop-164 -j DROP inet/filter/limit-408 -m limit --limit 1/second -j LOG inet6/filter/limit-408 -m limit --limit 1/second -j LOG inet/filter/limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-408 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 704 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 410 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-409 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-409 - inet/filter/limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-166 - inet6/filter/limit-409 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-166 - inet/filter/logdrop-166 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-166 -m limit --limit 1/second -j LOG - inet/filter/logdrop-166 -j DROP - inet6/filter/logdrop-166 -j DROP + inet/filter/limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-165 + inet6/filter/limit-409 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-165 + inet/filter/logdrop-165 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-165 -m limit --limit 1/second -j LOG + inet/filter/logdrop-165 -j DROP + inet6/filter/logdrop-165 -j DROP inet/filter/limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-409 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 705 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 411 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-410 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-410 - inet/filter/limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-167 - inet6/filter/limit-410 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-167 - inet/filter/logdrop-167 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-167 -m limit --limit 1/second -j LOG - inet/filter/logdrop-167 -j DROP - inet6/filter/logdrop-167 -j DROP + inet/filter/limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-166 + inet6/filter/limit-410 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-166 + inet/filter/logdrop-166 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-166 -m limit --limit 1/second -j LOG + inet/filter/logdrop-166 -j DROP + inet6/filter/logdrop-166 -j DROP inet/filter/limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-410 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 706 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 412 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-411 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-411 - inet/filter/limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-168 - inet6/filter/limit-411 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-168 - inet/filter/logdrop-168 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-168 -m limit --limit 1/second -j LOG - inet/filter/logdrop-168 -j DROP - inet6/filter/logdrop-168 -j DROP + inet/filter/limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-167 + inet6/filter/limit-411 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-167 + inet/filter/logdrop-167 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-167 -m limit --limit 1/second -j LOG + inet/filter/logdrop-167 -j DROP + inet6/filter/logdrop-167 -j DROP inet/filter/limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-411 -m recent --name user:C --rdest --mask fe00:: --set -Filter 707 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","out":"B"} +Filter 413 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-412 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-412 - inet/filter/limit-412 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 - inet6/filter/limit-412 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 + inet/filter/limit-412 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-168 + inet6/filter/limit-412 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-168 + inet/filter/logdrop-168 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-168 -m limit --limit 1/second -j LOG + inet/filter/logdrop-168 -j DROP + inet6/filter/logdrop-168 -j DROP + inet/filter/limit-412 -j ACCEPT + inet6/filter/limit-412 -j ACCEPT + +Filter 414 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 inet/filter/logdrop-169 -m limit --limit 1/second -j LOG inet6/filter/logdrop-169 -m limit --limit 1/second -j LOG inet/filter/logdrop-169 -j DROP inet6/filter/logdrop-169 -j DROP - inet/filter/limit-412 -j ACCEPT - inet6/filter/limit-412 -j ACCEPT -Filter 708 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","out":"B"} +Filter 415 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-170 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-170 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-414 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-414 + inet/filter/limit-414 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-170 + inet6/filter/limit-414 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-170 inet/filter/logdrop-170 -m limit --limit 1/second -j LOG inet6/filter/logdrop-170 -m limit --limit 1/second -j LOG inet/filter/logdrop-170 -j DROP inet6/filter/logdrop-170 -j DROP - -Filter 709 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-414 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-414 - inet/filter/limit-414 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-171 - inet6/filter/limit-414 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-171 - inet/filter/logdrop-171 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-171 -m limit --limit 1/second -j LOG - inet/filter/logdrop-171 -j DROP - inet6/filter/logdrop-171 -j DROP inet/filter/limit-414 -m limit --limit 1/second -j LOG inet6/filter/limit-414 -m limit --limit 1/second -j LOG inet/filter/limit-414 -j ACCEPT inet6/filter/limit-414 -j ACCEPT -Filter 710 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 416 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-415 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-415 - inet/filter/limit-415 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-172 - inet6/filter/limit-415 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-172 - inet/filter/logdrop-172 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-172 -m limit --limit 1/second -j LOG - inet/filter/logdrop-172 -j DROP - inet6/filter/logdrop-172 -j DROP + inet/filter/limit-415 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-171 + inet6/filter/limit-415 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-171 + inet/filter/logdrop-171 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-171 -m limit --limit 1/second -j LOG + inet/filter/logdrop-171 -j DROP + inet6/filter/logdrop-171 -j DROP inet/filter/limit-415 -m limit --limit 1/second -j LOG inet6/filter/limit-415 -m limit --limit 1/second -j LOG -Filter 711 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 417 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-416 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-416 - inet/filter/limit-416 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-173 - inet6/filter/limit-416 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-173 - inet/filter/logdrop-173 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-173 -m limit --limit 1/second -j LOG - inet/filter/logdrop-173 -j DROP - inet6/filter/logdrop-173 -j DROP + inet/filter/limit-416 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-172 + inet6/filter/limit-416 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-172 + inet/filter/logdrop-172 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-172 -m limit --limit 1/second -j LOG + inet/filter/logdrop-172 -j DROP + inet6/filter/logdrop-172 -j DROP inet/filter/limit-416 -j ACCEPT inet6/filter/limit-416 -j ACCEPT -Filter 712 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 418 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-174 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-174 - inet/filter/logdrop-174 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-174 -m limit --limit 1/second -j LOG - inet/filter/logdrop-174 -j DROP - inet6/filter/logdrop-174 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-173 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-173 + inet/filter/logdrop-173 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-173 -m limit --limit 1/second -j LOG + inet/filter/logdrop-173 -j DROP + inet6/filter/logdrop-173 -j DROP -Filter 713 {"conn-limit":{"log":false},"in":"_fw","out":"B"} +Filter 419 {"conn-limit":{"log":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-418 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-418 @@ -7504,7 +5245,7 @@ Filter 713 {"conn-limit":{"log":false},"in":"_fw","out": inet/filter/limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 714 {"action":"pass","conn-limit":{"log":false},"in":"_fw","out":"B"} +Filter 420 {"action":"pass","conn-limit":{"log":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-419 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-419 @@ -7513,7 +5254,7 @@ Filter 714 {"action":"pass","conn-limit":{"log":false}," inet/filter/limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --set inet6/filter/limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 715 {"conn-limit":{"log":false},"in":"_fw","log":true,"out":"B"} +Filter 421 {"conn-limit":{"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-420 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-420 @@ -7524,7 +5265,7 @@ Filter 715 {"conn-limit":{"log":false},"in":"_fw","log": inet/filter/limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 716 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":true,"out":"B"} +Filter 422 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-421 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-421 @@ -7533,7 +5274,7 @@ Filter 716 {"action":"pass","conn-limit":{"log":false}," inet/filter/limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 717 {"conn-limit":{"log":false},"in":"_fw","log":"none","out":"B"} +Filter 423 {"conn-limit":{"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-422 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-422 @@ -7542,7 +5283,7 @@ Filter 717 {"conn-limit":{"log":false},"in":"_fw","log": inet/filter/limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 718 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":"none","out":"B"} +Filter 424 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-423 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-423 @@ -7551,7 +5292,7 @@ Filter 718 {"action":"pass","conn-limit":{"log":false}," inet/filter/limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --set inet6/filter/limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 719 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","out":"B"} +Filter 425 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-424 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-424 @@ -7560,7 +5301,7 @@ Filter 719 {"conn-limit":{"log":false,"name":"A"},"in":" inet/filter/limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 720 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","out":"B"} +Filter 426 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-425 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-425 @@ -7569,7 +5310,7 @@ Filter 720 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 721 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 427 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-426 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-426 @@ -7580,7 +5321,7 @@ Filter 721 {"conn-limit":{"log":false,"name":"A"},"in":" inet/filter/limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 722 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 428 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-427 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-427 @@ -7589,7 +5330,7 @@ Filter 722 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 723 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 429 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-428 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-428 @@ -7598,7 +5339,7 @@ Filter 723 {"conn-limit":{"log":false,"name":"A"},"in":" inet/filter/limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 724 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 430 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-429 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-429 @@ -7607,7 +5348,7 @@ Filter 724 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 725 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 431 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-430 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-430 @@ -7616,12 +5357,12 @@ Filter 725 {"conn-limit":{"log":false,"name":"A","update inet/filter/limit-430 -j ACCEPT inet6/filter/limit-430 -j ACCEPT -Filter 726 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 432 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 727 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 433 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-432 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-432 @@ -7632,7 +5373,7 @@ Filter 727 {"conn-limit":{"log":false,"name":"A","update inet/filter/limit-432 -j ACCEPT inet6/filter/limit-432 -j ACCEPT -Filter 728 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 434 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-433 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-433 @@ -7641,7 +5382,7 @@ Filter 728 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-433 -m limit --limit 1/second -j LOG inet6/filter/limit-433 -m limit --limit 1/second -j LOG -Filter 729 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 435 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-434 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-434 @@ -7650,12 +5391,12 @@ Filter 729 {"conn-limit":{"log":false,"name":"A","update inet/filter/limit-434 -j ACCEPT inet6/filter/limit-434 -j ACCEPT -Filter 730 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 436 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 731 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","out":"B"} +Filter 437 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-436 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-436 @@ -7664,7 +5405,7 @@ Filter 731 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 732 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","out":"B"} +Filter 438 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-437 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-437 @@ -7673,7 +5414,7 @@ Filter 732 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 733 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 439 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-438 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-438 @@ -7684,7 +5425,7 @@ Filter 733 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 734 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 440 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-439 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-439 @@ -7693,7 +5434,7 @@ Filter 734 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 735 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 441 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-440 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-440 @@ -7702,7 +5443,7 @@ Filter 735 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 736 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 442 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-441 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-441 @@ -7711,7 +5452,7 @@ Filter 736 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 737 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 443 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-442 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-442 @@ -7720,12 +5461,12 @@ Filter 737 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-442 -j ACCEPT inet6/filter/limit-442 -j ACCEPT -Filter 738 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 444 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 739 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 445 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-444 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-444 @@ -7736,7 +5477,7 @@ Filter 739 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-444 -j ACCEPT inet6/filter/limit-444 -j ACCEPT -Filter 740 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 446 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-445 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-445 @@ -7745,7 +5486,7 @@ Filter 740 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-445 -m limit --limit 1/second -j LOG inet6/filter/limit-445 -m limit --limit 1/second -j LOG -Filter 741 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 447 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-446 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-446 @@ -7754,12 +5495,12 @@ Filter 741 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-446 -j ACCEPT inet6/filter/limit-446 -j ACCEPT -Filter 742 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 448 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 743 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","out":"B"} +Filter 449 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-448 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-448 @@ -7768,7 +5509,7 @@ Filter 743 {"conn-limit":{"log":false,"name":"C"},"in":" inet/filter/limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-448 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 744 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","out":"B"} +Filter 450 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-449 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-449 @@ -7777,7 +5518,7 @@ Filter 744 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-449 -m recent --name user:C --rsource --mask fe00:: --set -Filter 745 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 451 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-450 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-450 @@ -7788,7 +5529,7 @@ Filter 745 {"conn-limit":{"log":false,"name":"C"},"in":" inet/filter/limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-450 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 746 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 452 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-451 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-451 @@ -7797,7 +5538,7 @@ Filter 746 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-451 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 747 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 453 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-452 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-452 @@ -7806,7 +5547,7 @@ Filter 747 {"conn-limit":{"log":false,"name":"C"},"in":" inet/filter/limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-452 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 748 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 454 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-453 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-453 @@ -7815,7 +5556,7 @@ Filter 748 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-453 -m recent --name user:C --rsource --mask fe00:: --set -Filter 749 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 455 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-454 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-454 @@ -7824,12 +5565,12 @@ Filter 749 {"conn-limit":{"log":false,"name":"C","update inet/filter/limit-454 -j ACCEPT inet6/filter/limit-454 -j ACCEPT -Filter 750 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 456 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 751 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 457 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-456 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-456 @@ -7840,7 +5581,7 @@ Filter 751 {"conn-limit":{"log":false,"name":"C","update inet/filter/limit-456 -j ACCEPT inet6/filter/limit-456 -j ACCEPT -Filter 752 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 458 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-457 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-457 @@ -7849,7 +5590,7 @@ Filter 752 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-457 -m limit --limit 1/second -j LOG inet6/filter/limit-457 -m limit --limit 1/second -j LOG -Filter 753 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 459 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-458 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-458 @@ -7858,12 +5599,12 @@ Filter 753 {"conn-limit":{"log":false,"name":"C","update inet/filter/limit-458 -j ACCEPT inet6/filter/limit-458 -j ACCEPT -Filter 754 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 460 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 755 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","out":"B"} +Filter 461 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-460 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-460 @@ -7872,7 +5613,7 @@ Filter 755 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-460 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 756 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","out":"B"} +Filter 462 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-461 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-461 @@ -7881,7 +5622,7 @@ Filter 756 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-461 -m recent --name user:C --rdest --mask fe00:: --set -Filter 757 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 463 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-462 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-462 @@ -7892,7 +5633,7 @@ Filter 757 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-462 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 758 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 464 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-463 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-463 @@ -7901,7 +5642,7 @@ Filter 758 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-463 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 759 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 465 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-464 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-464 @@ -7910,7 +5651,7 @@ Filter 759 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-464 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 760 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 466 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-465 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-465 @@ -7919,7 +5660,7 @@ Filter 760 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-465 -m recent --name user:C --rdest --mask fe00:: --set -Filter 761 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 467 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-466 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-466 @@ -7928,12 +5669,12 @@ Filter 761 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-466 -j ACCEPT inet6/filter/limit-466 -j ACCEPT -Filter 762 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 468 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 763 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 469 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-468 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-468 @@ -7944,7 +5685,7 @@ Filter 763 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-468 -j ACCEPT inet6/filter/limit-468 -j ACCEPT -Filter 764 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 470 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-469 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-469 @@ -7953,7 +5694,7 @@ Filter 764 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-469 -m limit --limit 1/second -j LOG inet6/filter/limit-469 -m limit --limit 1/second -j LOG -Filter 765 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 471 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-470 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-470 @@ -7962,12 +5703,12 @@ Filter 765 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-470 -j ACCEPT inet6/filter/limit-470 -j ACCEPT -Filter 766 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 472 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 767 {"conn-limit":{"log":"none"},"in":"_fw","out":"B"} +Filter 473 {"conn-limit":{"log":"none"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-472 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-472 @@ -7976,7 +5717,7 @@ Filter 767 {"conn-limit":{"log":"none"},"in":"_fw","out" inet/filter/limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 768 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","out":"B"} +Filter 474 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-473 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-473 @@ -7985,7 +5726,7 @@ Filter 768 {"action":"pass","conn-limit":{"log":"none"}, inet/filter/limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --set inet6/filter/limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 769 {"conn-limit":{"log":"none"},"in":"_fw","log":true,"out":"B"} +Filter 475 {"conn-limit":{"log":"none"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-474 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-474 @@ -7996,7 +5737,7 @@ Filter 769 {"conn-limit":{"log":"none"},"in":"_fw","log" inet/filter/limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 770 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":true,"out":"B"} +Filter 476 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-475 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-475 @@ -8005,7 +5746,7 @@ Filter 770 {"action":"pass","conn-limit":{"log":"none"}, inet/filter/limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 771 {"conn-limit":{"log":"none"},"in":"_fw","log":"none","out":"B"} +Filter 477 {"conn-limit":{"log":"none"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-476 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-476 @@ -8014,7 +5755,7 @@ Filter 771 {"conn-limit":{"log":"none"},"in":"_fw","log" inet/filter/limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 772 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":"none","out":"B"} +Filter 478 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-477 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-477 @@ -8023,7 +5764,7 @@ Filter 772 {"action":"pass","conn-limit":{"log":"none"}, inet/filter/limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --set inet6/filter/limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 773 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","out":"B"} +Filter 479 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-478 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-478 @@ -8032,7 +5773,7 @@ Filter 773 {"conn-limit":{"log":"none","name":"A"},"in": inet/filter/limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 774 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","out":"B"} +Filter 480 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-479 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-479 @@ -8041,7 +5782,7 @@ Filter 774 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 775 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 481 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-480 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-480 @@ -8052,7 +5793,7 @@ Filter 775 {"conn-limit":{"log":"none","name":"A"},"in": inet/filter/limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 776 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 482 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-481 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-481 @@ -8061,7 +5802,7 @@ Filter 776 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 777 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 483 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-482 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-482 @@ -8070,7 +5811,7 @@ Filter 777 {"conn-limit":{"log":"none","name":"A"},"in": inet/filter/limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 778 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 484 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-483 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-483 @@ -8079,7 +5820,7 @@ Filter 778 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 779 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +Filter 485 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-484 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-484 @@ -8088,12 +5829,12 @@ Filter 779 {"conn-limit":{"log":"none","name":"A","updat inet/filter/limit-484 -j ACCEPT inet6/filter/limit-484 -j ACCEPT -Filter 780 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +Filter 486 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 781 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 487 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-486 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-486 @@ -8104,7 +5845,7 @@ Filter 781 {"conn-limit":{"log":"none","name":"A","updat inet/filter/limit-486 -j ACCEPT inet6/filter/limit-486 -j ACCEPT -Filter 782 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 488 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-487 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-487 @@ -8113,7 +5854,7 @@ Filter 782 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-487 -m limit --limit 1/second -j LOG inet6/filter/limit-487 -m limit --limit 1/second -j LOG -Filter 783 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 489 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-488 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-488 @@ -8122,12 +5863,12 @@ Filter 783 {"conn-limit":{"log":"none","name":"A","updat inet/filter/limit-488 -j ACCEPT inet6/filter/limit-488 -j ACCEPT -Filter 784 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 490 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 785 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","out":"B"} +Filter 491 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-490 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-490 @@ -8136,7 +5877,7 @@ Filter 785 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 786 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","out":"B"} +Filter 492 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-491 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-491 @@ -8145,7 +5886,7 @@ Filter 786 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 787 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 493 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-492 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-492 @@ -8156,7 +5897,7 @@ Filter 787 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 788 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 494 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-493 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-493 @@ -8165,7 +5906,7 @@ Filter 788 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 789 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 495 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-494 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-494 @@ -8174,7 +5915,7 @@ Filter 789 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 790 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 496 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-495 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-495 @@ -8183,7 +5924,7 @@ Filter 790 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 791 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","out":"B"} +Filter 497 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-496 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-496 @@ -8192,12 +5933,12 @@ Filter 791 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-496 -j ACCEPT inet6/filter/limit-496 -j ACCEPT -Filter 792 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","out":"B"} +Filter 498 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 793 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 499 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-498 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-498 @@ -8208,7 +5949,7 @@ Filter 793 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-498 -j ACCEPT inet6/filter/limit-498 -j ACCEPT -Filter 794 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 500 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-499 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-499 @@ -8217,7 +5958,7 @@ Filter 794 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-499 -m limit --limit 1/second -j LOG inet6/filter/limit-499 -m limit --limit 1/second -j LOG -Filter 795 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 501 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-500 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-500 @@ -8226,12 +5967,12 @@ Filter 795 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-500 -j ACCEPT inet6/filter/limit-500 -j ACCEPT -Filter 796 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 502 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 797 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","out":"B"} +Filter 503 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-502 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-502 @@ -8240,7 +5981,7 @@ Filter 797 {"conn-limit":{"log":"none","name":"C"},"in": inet/filter/limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-502 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 798 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","out":"B"} +Filter 504 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-503 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-503 @@ -8249,7 +5990,7 @@ Filter 798 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-503 -m recent --name user:C --rsource --mask fe00:: --set -Filter 799 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 505 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-504 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-504 @@ -8260,7 +6001,7 @@ Filter 799 {"conn-limit":{"log":"none","name":"C"},"in": inet/filter/limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-504 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 800 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 506 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-505 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-505 @@ -8269,7 +6010,7 @@ Filter 800 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-505 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 801 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 507 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-506 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-506 @@ -8278,7 +6019,7 @@ Filter 801 {"conn-limit":{"log":"none","name":"C"},"in": inet/filter/limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-506 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 802 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 508 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-507 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-507 @@ -8287,7 +6028,7 @@ Filter 802 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-507 -m recent --name user:C --rsource --mask fe00:: --set -Filter 803 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +Filter 509 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-508 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-508 @@ -8296,12 +6037,12 @@ Filter 803 {"conn-limit":{"log":"none","name":"C","updat inet/filter/limit-508 -j ACCEPT inet6/filter/limit-508 -j ACCEPT -Filter 804 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +Filter 510 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 805 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 511 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-510 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-510 @@ -8312,7 +6053,7 @@ Filter 805 {"conn-limit":{"log":"none","name":"C","updat inet/filter/limit-510 -j ACCEPT inet6/filter/limit-510 -j ACCEPT -Filter 806 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 512 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-511 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-511 @@ -8321,7 +6062,7 @@ Filter 806 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-511 -m limit --limit 1/second -j LOG inet6/filter/limit-511 -m limit --limit 1/second -j LOG -Filter 807 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 513 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-512 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-512 @@ -8330,12 +6071,12 @@ Filter 807 {"conn-limit":{"log":"none","name":"C","updat inet/filter/limit-512 -j ACCEPT inet6/filter/limit-512 -j ACCEPT -Filter 808 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 514 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 809 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","out":"B"} +Filter 515 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-514 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-514 @@ -8344,7 +6085,7 @@ Filter 809 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-514 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 810 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","out":"B"} +Filter 516 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-515 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-515 @@ -8353,7 +6094,7 @@ Filter 810 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-515 -m recent --name user:C --rdest --mask fe00:: --set -Filter 811 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 517 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-516 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-516 @@ -8364,7 +6105,7 @@ Filter 811 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-516 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 812 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 518 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-517 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-517 @@ -8373,7 +6114,7 @@ Filter 812 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-517 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 813 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 519 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-518 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-518 @@ -8382,7 +6123,7 @@ Filter 813 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-518 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 814 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 520 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-519 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-519 @@ -8391,7 +6132,7 @@ Filter 814 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-519 -m recent --name user:C --rdest --mask fe00:: --set -Filter 815 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","out":"B"} +Filter 521 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-520 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-520 @@ -8400,12 +6141,12 @@ Filter 815 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-520 -j ACCEPT inet6/filter/limit-520 -j ACCEPT -Filter 816 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","out":"B"} +Filter 522 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 817 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 523 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-522 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-522 @@ -8416,7 +6157,7 @@ Filter 817 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-522 -j ACCEPT inet6/filter/limit-522 -j ACCEPT -Filter 818 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 524 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-523 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-523 @@ -8425,7 +6166,7 @@ Filter 818 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-523 -m limit --limit 1/second -j LOG inet6/filter/limit-523 -m limit --limit 1/second -j LOG -Filter 819 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 525 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-524 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-524 @@ -8434,700 +6175,700 @@ Filter 819 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-524 -j ACCEPT inet6/filter/limit-524 -j ACCEPT -Filter 820 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 526 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 821 {"conn-limit":{"interval":5},"in":"_fw","out":"B"} +Filter 527 {"conn-limit":{"interval":5},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-526 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-526 - inet/filter/limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 - inet6/filter/limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 - inet/filter/logdrop-175 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-175 -m limit --limit 1/second -j LOG - inet/filter/logdrop-175 -j DROP - inet6/filter/logdrop-175 -j DROP + inet/filter/limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-174 + inet6/filter/limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-174 + inet/filter/logdrop-174 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-174 -m limit --limit 1/second -j LOG + inet/filter/logdrop-174 -j DROP + inet6/filter/logdrop-174 -j DROP inet/filter/limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 822 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","out":"B"} +Filter 528 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-527 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-527 - inet/filter/limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 - inet6/filter/limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 - inet/filter/logdrop-176 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-176 -m limit --limit 1/second -j LOG - inet/filter/logdrop-176 -j DROP - inet6/filter/logdrop-176 -j DROP + inet/filter/limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 + inet6/filter/limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 + inet/filter/logdrop-175 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-175 -m limit --limit 1/second -j LOG + inet/filter/logdrop-175 -j DROP + inet6/filter/logdrop-175 -j DROP inet/filter/limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --set inet6/filter/limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 823 {"conn-limit":{"interval":5},"in":"_fw","log":true,"out":"B"} +Filter 529 {"conn-limit":{"interval":5},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-528 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-528 - inet/filter/limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 - inet6/filter/limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 - inet/filter/logdrop-177 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-177 -m limit --limit 1/second -j LOG - inet/filter/logdrop-177 -j DROP - inet6/filter/logdrop-177 -j DROP + inet/filter/limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 + inet6/filter/limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 + inet/filter/logdrop-176 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-176 -m limit --limit 1/second -j LOG + inet/filter/logdrop-176 -j DROP + inet6/filter/logdrop-176 -j DROP inet/filter/limit-528 -m limit --limit 1/second -j LOG inet6/filter/limit-528 -m limit --limit 1/second -j LOG inet/filter/limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 824 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":true,"out":"B"} +Filter 530 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-529 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-529 - inet/filter/limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 - inet6/filter/limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 - inet/filter/logdrop-178 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-178 -m limit --limit 1/second -j LOG - inet/filter/logdrop-178 -j DROP - inet6/filter/logdrop-178 -j DROP + inet/filter/limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 + inet6/filter/limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 + inet/filter/logdrop-177 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-177 -m limit --limit 1/second -j LOG + inet/filter/logdrop-177 -j DROP + inet6/filter/logdrop-177 -j DROP inet/filter/limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 825 {"conn-limit":{"interval":5},"in":"_fw","log":"none","out":"B"} +Filter 531 {"conn-limit":{"interval":5},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-530 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-530 - inet/filter/limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 - inet6/filter/limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 - inet/filter/logdrop-179 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-179 -m limit --limit 1/second -j LOG - inet/filter/logdrop-179 -j DROP - inet6/filter/logdrop-179 -j DROP + inet/filter/limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 + inet6/filter/limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 + inet/filter/logdrop-178 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-178 -m limit --limit 1/second -j LOG + inet/filter/logdrop-178 -j DROP + inet6/filter/logdrop-178 -j DROP inet/filter/limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 826 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":"none","out":"B"} +Filter 532 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-531 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-531 - inet/filter/limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 - inet6/filter/limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 - inet/filter/logdrop-180 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-180 -m limit --limit 1/second -j LOG - inet/filter/logdrop-180 -j DROP - inet6/filter/logdrop-180 -j DROP + inet/filter/limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 + inet6/filter/limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 + inet/filter/logdrop-179 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-179 -m limit --limit 1/second -j LOG + inet/filter/logdrop-179 -j DROP + inet6/filter/logdrop-179 -j DROP inet/filter/limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --set inet6/filter/limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 827 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","out":"B"} +Filter 533 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-532 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-532 - inet/filter/limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 - inet6/filter/limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 - inet/filter/logdrop-181 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-181 -m limit --limit 1/second -j LOG - inet/filter/logdrop-181 -j DROP - inet6/filter/logdrop-181 -j DROP + inet/filter/limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 + inet6/filter/limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 + inet/filter/logdrop-180 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-180 -m limit --limit 1/second -j LOG + inet/filter/logdrop-180 -j DROP + inet6/filter/logdrop-180 -j DROP inet/filter/limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 828 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","out":"B"} +Filter 534 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-533 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-533 - inet/filter/limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 - inet6/filter/limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 - inet/filter/logdrop-182 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-182 -m limit --limit 1/second -j LOG - inet/filter/logdrop-182 -j DROP - inet6/filter/logdrop-182 -j DROP + inet/filter/limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 + inet6/filter/limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 + inet/filter/logdrop-181 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-181 -m limit --limit 1/second -j LOG + inet/filter/logdrop-181 -j DROP + inet6/filter/logdrop-181 -j DROP inet/filter/limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 829 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 535 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-534 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-534 - inet/filter/limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 - inet6/filter/limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 - inet/filter/logdrop-183 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-183 -m limit --limit 1/second -j LOG - inet/filter/logdrop-183 -j DROP - inet6/filter/logdrop-183 -j DROP + inet/filter/limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 + inet6/filter/limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 + inet/filter/logdrop-182 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-182 -m limit --limit 1/second -j LOG + inet/filter/logdrop-182 -j DROP + inet6/filter/logdrop-182 -j DROP inet/filter/limit-534 -m limit --limit 1/second -j LOG inet6/filter/limit-534 -m limit --limit 1/second -j LOG inet/filter/limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 830 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 536 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-535 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-535 - inet/filter/limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-184 - inet6/filter/limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-184 - inet/filter/logdrop-184 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-184 -m limit --limit 1/second -j LOG - inet/filter/logdrop-184 -j DROP - inet6/filter/logdrop-184 -j DROP + inet/filter/limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 + inet6/filter/limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 + inet/filter/logdrop-183 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-183 -m limit --limit 1/second -j LOG + inet/filter/logdrop-183 -j DROP + inet6/filter/logdrop-183 -j DROP inet/filter/limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 831 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 537 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-536 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-536 - inet/filter/limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-185 - inet6/filter/limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-185 - inet/filter/logdrop-185 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-185 -m limit --limit 1/second -j LOG - inet/filter/logdrop-185 -j DROP - inet6/filter/logdrop-185 -j DROP + inet/filter/limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-184 + inet6/filter/limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-184 + inet/filter/logdrop-184 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-184 -m limit --limit 1/second -j LOG + inet/filter/logdrop-184 -j DROP + inet6/filter/logdrop-184 -j DROP inet/filter/limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 832 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 538 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-537 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-537 - inet/filter/limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-186 - inet6/filter/limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-186 - inet/filter/logdrop-186 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-186 -m limit --limit 1/second -j LOG - inet/filter/logdrop-186 -j DROP - inet6/filter/logdrop-186 -j DROP + inet/filter/limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-185 + inet6/filter/limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-185 + inet/filter/logdrop-185 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-185 -m limit --limit 1/second -j LOG + inet/filter/logdrop-185 -j DROP + inet6/filter/logdrop-185 -j DROP inet/filter/limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 833 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 539 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-538 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-538 - inet/filter/limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 - inet6/filter/limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 + inet/filter/limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-186 + inet6/filter/limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-186 + inet/filter/logdrop-186 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-186 -m limit --limit 1/second -j LOG + inet/filter/logdrop-186 -j DROP + inet6/filter/logdrop-186 -j DROP + inet/filter/limit-538 -j ACCEPT + inet6/filter/limit-538 -j ACCEPT + +Filter 540 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 inet/filter/logdrop-187 -m limit --limit 1/second -j LOG inet6/filter/logdrop-187 -m limit --limit 1/second -j LOG inet/filter/logdrop-187 -j DROP inet6/filter/logdrop-187 -j DROP - inet/filter/limit-538 -j ACCEPT - inet6/filter/limit-538 -j ACCEPT -Filter 834 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 541 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-540 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-540 + inet/filter/limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 + inet6/filter/limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 inet/filter/logdrop-188 -m limit --limit 1/second -j LOG inet6/filter/logdrop-188 -m limit --limit 1/second -j LOG inet/filter/logdrop-188 -j DROP inet6/filter/logdrop-188 -j DROP - -Filter 835 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-540 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-540 - inet/filter/limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 - inet6/filter/limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 - inet/filter/logdrop-189 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-189 -m limit --limit 1/second -j LOG - inet/filter/logdrop-189 -j DROP - inet6/filter/logdrop-189 -j DROP inet/filter/limit-540 -m limit --limit 1/second -j LOG inet6/filter/limit-540 -m limit --limit 1/second -j LOG inet/filter/limit-540 -j ACCEPT inet6/filter/limit-540 -j ACCEPT -Filter 836 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 542 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-541 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-541 - inet/filter/limit-541 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 - inet6/filter/limit-541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 - inet/filter/logdrop-190 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-190 -m limit --limit 1/second -j LOG - inet/filter/logdrop-190 -j DROP - inet6/filter/logdrop-190 -j DROP + inet/filter/limit-541 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 + inet6/filter/limit-541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 + inet/filter/logdrop-189 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-189 -m limit --limit 1/second -j LOG + inet/filter/logdrop-189 -j DROP + inet6/filter/logdrop-189 -j DROP inet/filter/limit-541 -m limit --limit 1/second -j LOG inet6/filter/limit-541 -m limit --limit 1/second -j LOG -Filter 837 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 543 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-542 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-542 - inet/filter/limit-542 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 - inet6/filter/limit-542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 + inet/filter/limit-542 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 + inet6/filter/limit-542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 + inet/filter/logdrop-190 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-190 -m limit --limit 1/second -j LOG + inet/filter/logdrop-190 -j DROP + inet6/filter/logdrop-190 -j DROP + inet/filter/limit-542 -j ACCEPT + inet6/filter/limit-542 -j ACCEPT + +Filter 544 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 inet/filter/logdrop-191 -m limit --limit 1/second -j LOG inet6/filter/logdrop-191 -m limit --limit 1/second -j LOG inet/filter/logdrop-191 -j DROP inet6/filter/logdrop-191 -j DROP - inet/filter/limit-542 -j ACCEPT - inet6/filter/limit-542 -j ACCEPT -Filter 838 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 545 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-192 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-192 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-544 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-544 + inet/filter/limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-192 + inet6/filter/limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-192 inet/filter/logdrop-192 -m limit --limit 1/second -j LOG inet6/filter/logdrop-192 -m limit --limit 1/second -j LOG inet/filter/logdrop-192 -j DROP inet6/filter/logdrop-192 -j DROP - -Filter 839 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-544 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-544 - inet/filter/limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-193 - inet6/filter/limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-193 - inet/filter/logdrop-193 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-193 -m limit --limit 1/second -j LOG - inet/filter/logdrop-193 -j DROP - inet6/filter/logdrop-193 -j DROP inet/filter/limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 840 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","out":"B"} +Filter 546 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-545 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-545 - inet/filter/limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-194 - inet6/filter/limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-194 - inet/filter/logdrop-194 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-194 -m limit --limit 1/second -j LOG - inet/filter/logdrop-194 -j DROP - inet6/filter/logdrop-194 -j DROP + inet/filter/limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-193 + inet6/filter/limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-193 + inet/filter/logdrop-193 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-193 -m limit --limit 1/second -j LOG + inet/filter/logdrop-193 -j DROP + inet6/filter/logdrop-193 -j DROP inet/filter/limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 841 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 547 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-546 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-546 - inet/filter/limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-195 - inet6/filter/limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-195 - inet/filter/logdrop-195 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-195 -m limit --limit 1/second -j LOG - inet/filter/logdrop-195 -j DROP - inet6/filter/logdrop-195 -j DROP + inet/filter/limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-194 + inet6/filter/limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-194 + inet/filter/logdrop-194 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-194 -m limit --limit 1/second -j LOG + inet/filter/logdrop-194 -j DROP + inet6/filter/logdrop-194 -j DROP inet/filter/limit-546 -m limit --limit 1/second -j LOG inet6/filter/limit-546 -m limit --limit 1/second -j LOG inet/filter/limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 842 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 548 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-547 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-547 - inet/filter/limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-196 - inet6/filter/limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-196 - inet/filter/logdrop-196 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-196 -m limit --limit 1/second -j LOG - inet/filter/logdrop-196 -j DROP - inet6/filter/logdrop-196 -j DROP + inet/filter/limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-195 + inet6/filter/limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-195 + inet/filter/logdrop-195 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-195 -m limit --limit 1/second -j LOG + inet/filter/logdrop-195 -j DROP + inet6/filter/logdrop-195 -j DROP inet/filter/limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 843 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 549 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-548 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-548 - inet/filter/limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-197 - inet6/filter/limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-197 - inet/filter/logdrop-197 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-197 -m limit --limit 1/second -j LOG - inet/filter/logdrop-197 -j DROP - inet6/filter/logdrop-197 -j DROP + inet/filter/limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-196 + inet6/filter/limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-196 + inet/filter/logdrop-196 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-196 -m limit --limit 1/second -j LOG + inet/filter/logdrop-196 -j DROP + inet6/filter/logdrop-196 -j DROP inet/filter/limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 844 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 550 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-549 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-549 - inet/filter/limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-198 - inet6/filter/limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-198 - inet/filter/logdrop-198 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-198 -m limit --limit 1/second -j LOG - inet/filter/logdrop-198 -j DROP - inet6/filter/logdrop-198 -j DROP + inet/filter/limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-197 + inet6/filter/limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-197 + inet/filter/logdrop-197 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-197 -m limit --limit 1/second -j LOG + inet/filter/logdrop-197 -j DROP + inet6/filter/logdrop-197 -j DROP inet/filter/limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 845 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 551 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-550 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-550 - inet/filter/limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-199 - inet6/filter/limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-199 + inet/filter/limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-198 + inet6/filter/limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-198 + inet/filter/logdrop-198 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-198 -m limit --limit 1/second -j LOG + inet/filter/logdrop-198 -j DROP + inet6/filter/logdrop-198 -j DROP + inet/filter/limit-550 -j ACCEPT + inet6/filter/limit-550 -j ACCEPT + +Filter 552 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-199 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-199 inet/filter/logdrop-199 -m limit --limit 1/second -j LOG inet6/filter/logdrop-199 -m limit --limit 1/second -j LOG inet/filter/logdrop-199 -j DROP inet6/filter/logdrop-199 -j DROP - inet/filter/limit-550 -j ACCEPT - inet6/filter/limit-550 -j ACCEPT -Filter 846 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 553 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-200 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-552 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-552 + inet/filter/limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 + inet6/filter/limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-200 inet/filter/logdrop-200 -m limit --limit 1/second -j LOG inet6/filter/logdrop-200 -m limit --limit 1/second -j LOG inet/filter/logdrop-200 -j DROP inet6/filter/logdrop-200 -j DROP - -Filter 847 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-552 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-552 - inet/filter/limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 - inet6/filter/limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-201 - inet/filter/logdrop-201 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-201 -m limit --limit 1/second -j LOG - inet/filter/logdrop-201 -j DROP - inet6/filter/logdrop-201 -j DROP inet/filter/limit-552 -m limit --limit 1/second -j LOG inet6/filter/limit-552 -m limit --limit 1/second -j LOG inet/filter/limit-552 -j ACCEPT inet6/filter/limit-552 -j ACCEPT -Filter 848 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 554 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-553 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-553 - inet/filter/limit-553 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 - inet6/filter/limit-553 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-202 - inet/filter/logdrop-202 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-202 -m limit --limit 1/second -j LOG - inet/filter/logdrop-202 -j DROP - inet6/filter/logdrop-202 -j DROP + inet/filter/limit-553 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 + inet6/filter/limit-553 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-201 + inet/filter/logdrop-201 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-201 -m limit --limit 1/second -j LOG + inet/filter/logdrop-201 -j DROP + inet6/filter/logdrop-201 -j DROP inet/filter/limit-553 -m limit --limit 1/second -j LOG inet6/filter/limit-553 -m limit --limit 1/second -j LOG -Filter 849 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 555 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-554 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-554 - inet/filter/limit-554 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 - inet6/filter/limit-554 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-203 + inet/filter/limit-554 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 + inet6/filter/limit-554 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-202 + inet/filter/logdrop-202 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-202 -m limit --limit 1/second -j LOG + inet/filter/logdrop-202 -j DROP + inet6/filter/logdrop-202 -j DROP + inet/filter/limit-554 -j ACCEPT + inet6/filter/limit-554 -j ACCEPT + +Filter 556 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-203 inet/filter/logdrop-203 -m limit --limit 1/second -j LOG inet6/filter/logdrop-203 -m limit --limit 1/second -j LOG inet/filter/logdrop-203 -j DROP inet6/filter/logdrop-203 -j DROP - inet/filter/limit-554 -j ACCEPT - inet6/filter/limit-554 -j ACCEPT -Filter 850 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 557 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-204 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-204 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-556 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-556 + inet/filter/limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-204 + inet6/filter/limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-204 inet/filter/logdrop-204 -m limit --limit 1/second -j LOG inet6/filter/logdrop-204 -m limit --limit 1/second -j LOG inet/filter/logdrop-204 -j DROP inet6/filter/logdrop-204 -j DROP - -Filter 851 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-556 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-556 - inet/filter/limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-205 - inet6/filter/limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-205 - inet/filter/logdrop-205 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-205 -m limit --limit 1/second -j LOG - inet/filter/logdrop-205 -j DROP - inet6/filter/logdrop-205 -j DROP inet/filter/limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-556 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 852 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","out":"B"} +Filter 558 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-557 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-557 - inet/filter/limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-206 - inet6/filter/limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-206 - inet/filter/logdrop-206 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-206 -m limit --limit 1/second -j LOG - inet/filter/logdrop-206 -j DROP - inet6/filter/logdrop-206 -j DROP + inet/filter/limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-205 + inet6/filter/limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-205 + inet/filter/logdrop-205 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-205 -m limit --limit 1/second -j LOG + inet/filter/logdrop-205 -j DROP + inet6/filter/logdrop-205 -j DROP inet/filter/limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-557 -m recent --name user:C --rsource --mask fe00:: --set -Filter 853 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 559 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-558 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-558 - inet/filter/limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-207 - inet6/filter/limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-207 - inet/filter/logdrop-207 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-207 -m limit --limit 1/second -j LOG - inet/filter/logdrop-207 -j DROP - inet6/filter/logdrop-207 -j DROP + inet/filter/limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-206 + inet6/filter/limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-206 + inet/filter/logdrop-206 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-206 -m limit --limit 1/second -j LOG + inet/filter/logdrop-206 -j DROP + inet6/filter/logdrop-206 -j DROP inet/filter/limit-558 -m limit --limit 1/second -j LOG inet6/filter/limit-558 -m limit --limit 1/second -j LOG inet/filter/limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-558 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 854 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 560 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-559 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-559 - inet/filter/limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 - inet6/filter/limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 - inet/filter/logdrop-208 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-208 -m limit --limit 1/second -j LOG - inet/filter/logdrop-208 -j DROP - inet6/filter/logdrop-208 -j DROP + inet/filter/limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-207 + inet6/filter/limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-207 + inet/filter/logdrop-207 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-207 -m limit --limit 1/second -j LOG + inet/filter/logdrop-207 -j DROP + inet6/filter/logdrop-207 -j DROP inet/filter/limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-559 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 855 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 561 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-560 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-560 - inet/filter/limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 - inet6/filter/limit-560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 - inet/filter/logdrop-209 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-209 -m limit --limit 1/second -j LOG - inet/filter/logdrop-209 -j DROP - inet6/filter/logdrop-209 -j DROP + inet/filter/limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 + inet6/filter/limit-560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 + inet/filter/logdrop-208 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-208 -m limit --limit 1/second -j LOG + inet/filter/logdrop-208 -j DROP + inet6/filter/logdrop-208 -j DROP inet/filter/limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-560 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 856 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 562 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-561 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-561 - inet/filter/limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-210 - inet6/filter/limit-561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-210 - inet/filter/logdrop-210 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-210 -m limit --limit 1/second -j LOG - inet/filter/logdrop-210 -j DROP - inet6/filter/logdrop-210 -j DROP + inet/filter/limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 + inet6/filter/limit-561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 + inet/filter/logdrop-209 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-209 -m limit --limit 1/second -j LOG + inet/filter/logdrop-209 -j DROP + inet6/filter/logdrop-209 -j DROP inet/filter/limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-561 -m recent --name user:C --rsource --mask fe00:: --set -Filter 857 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 563 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-562 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-562 - inet/filter/limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-211 - inet6/filter/limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-211 + inet/filter/limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-210 + inet6/filter/limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-210 + inet/filter/logdrop-210 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-210 -m limit --limit 1/second -j LOG + inet/filter/logdrop-210 -j DROP + inet6/filter/logdrop-210 -j DROP + inet/filter/limit-562 -j ACCEPT + inet6/filter/limit-562 -j ACCEPT + +Filter 564 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-211 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-211 inet/filter/logdrop-211 -m limit --limit 1/second -j LOG inet6/filter/logdrop-211 -m limit --limit 1/second -j LOG inet/filter/logdrop-211 -j DROP inet6/filter/logdrop-211 -j DROP - inet/filter/limit-562 -j ACCEPT - inet6/filter/limit-562 -j ACCEPT -Filter 858 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 565 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-212 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-212 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-564 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-564 + inet/filter/limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-212 + inet6/filter/limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-212 inet/filter/logdrop-212 -m limit --limit 1/second -j LOG inet6/filter/logdrop-212 -m limit --limit 1/second -j LOG inet/filter/logdrop-212 -j DROP inet6/filter/logdrop-212 -j DROP - -Filter 859 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-564 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-564 - inet/filter/limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-213 - inet6/filter/limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-213 - inet/filter/logdrop-213 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-213 -m limit --limit 1/second -j LOG - inet/filter/logdrop-213 -j DROP - inet6/filter/logdrop-213 -j DROP inet/filter/limit-564 -m limit --limit 1/second -j LOG inet6/filter/limit-564 -m limit --limit 1/second -j LOG inet/filter/limit-564 -j ACCEPT inet6/filter/limit-564 -j ACCEPT -Filter 860 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 566 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-565 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-565 - inet/filter/limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-214 - inet6/filter/limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-214 - inet/filter/logdrop-214 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-214 -m limit --limit 1/second -j LOG - inet/filter/logdrop-214 -j DROP - inet6/filter/logdrop-214 -j DROP + inet/filter/limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-213 + inet6/filter/limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-213 + inet/filter/logdrop-213 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-213 -m limit --limit 1/second -j LOG + inet/filter/logdrop-213 -j DROP + inet6/filter/logdrop-213 -j DROP inet/filter/limit-565 -m limit --limit 1/second -j LOG inet6/filter/limit-565 -m limit --limit 1/second -j LOG -Filter 861 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 567 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-566 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-566 - inet/filter/limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-215 - inet6/filter/limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-215 + inet/filter/limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-214 + inet6/filter/limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-214 + inet/filter/logdrop-214 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-214 -m limit --limit 1/second -j LOG + inet/filter/logdrop-214 -j DROP + inet6/filter/logdrop-214 -j DROP + inet/filter/limit-566 -j ACCEPT + inet6/filter/limit-566 -j ACCEPT + +Filter 568 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-215 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-215 inet/filter/logdrop-215 -m limit --limit 1/second -j LOG inet6/filter/logdrop-215 -m limit --limit 1/second -j LOG inet/filter/logdrop-215 -j DROP inet6/filter/logdrop-215 -j DROP - inet/filter/limit-566 -j ACCEPT - inet6/filter/limit-566 -j ACCEPT -Filter 862 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 569 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-216 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-216 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-568 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-568 + inet/filter/limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-216 + inet6/filter/limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-216 inet/filter/logdrop-216 -m limit --limit 1/second -j LOG inet6/filter/logdrop-216 -m limit --limit 1/second -j LOG inet/filter/logdrop-216 -j DROP inet6/filter/logdrop-216 -j DROP - -Filter 863 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-568 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-568 - inet/filter/limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-217 - inet6/filter/limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-217 - inet/filter/logdrop-217 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-217 -m limit --limit 1/second -j LOG - inet/filter/logdrop-217 -j DROP - inet6/filter/logdrop-217 -j DROP inet/filter/limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-568 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 864 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","out":"B"} +Filter 570 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-569 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-569 - inet/filter/limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-218 - inet6/filter/limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-218 - inet/filter/logdrop-218 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-218 -m limit --limit 1/second -j LOG - inet/filter/logdrop-218 -j DROP - inet6/filter/logdrop-218 -j DROP + inet/filter/limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-217 + inet6/filter/limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-217 + inet/filter/logdrop-217 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-217 -m limit --limit 1/second -j LOG + inet/filter/logdrop-217 -j DROP + inet6/filter/logdrop-217 -j DROP inet/filter/limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-569 -m recent --name user:C --rdest --mask fe00:: --set -Filter 865 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 571 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-570 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-570 - inet/filter/limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-219 - inet6/filter/limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-219 - inet/filter/logdrop-219 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-219 -m limit --limit 1/second -j LOG - inet/filter/logdrop-219 -j DROP - inet6/filter/logdrop-219 -j DROP + inet/filter/limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-218 + inet6/filter/limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-218 + inet/filter/logdrop-218 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-218 -m limit --limit 1/second -j LOG + inet/filter/logdrop-218 -j DROP + inet6/filter/logdrop-218 -j DROP inet/filter/limit-570 -m limit --limit 1/second -j LOG inet6/filter/limit-570 -m limit --limit 1/second -j LOG inet/filter/limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-570 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 866 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 572 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-571 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-571 - inet/filter/limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-220 - inet6/filter/limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-220 - inet/filter/logdrop-220 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-220 -m limit --limit 1/second -j LOG - inet/filter/logdrop-220 -j DROP - inet6/filter/logdrop-220 -j DROP + inet/filter/limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-219 + inet6/filter/limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-219 + inet/filter/logdrop-219 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-219 -m limit --limit 1/second -j LOG + inet/filter/logdrop-219 -j DROP + inet6/filter/logdrop-219 -j DROP inet/filter/limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-571 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 867 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 573 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-572 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-572 - inet/filter/limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-221 - inet6/filter/limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-221 - inet/filter/logdrop-221 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-221 -m limit --limit 1/second -j LOG - inet/filter/logdrop-221 -j DROP - inet6/filter/logdrop-221 -j DROP + inet/filter/limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-220 + inet6/filter/limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-220 + inet/filter/logdrop-220 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-220 -m limit --limit 1/second -j LOG + inet/filter/logdrop-220 -j DROP + inet6/filter/logdrop-220 -j DROP inet/filter/limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-572 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 868 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 574 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-573 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-573 - inet/filter/limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-222 - inet6/filter/limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-222 - inet/filter/logdrop-222 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-222 -m limit --limit 1/second -j LOG - inet/filter/logdrop-222 -j DROP - inet6/filter/logdrop-222 -j DROP + inet/filter/limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-221 + inet6/filter/limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-221 + inet/filter/logdrop-221 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-221 -m limit --limit 1/second -j LOG + inet/filter/logdrop-221 -j DROP + inet6/filter/logdrop-221 -j DROP inet/filter/limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-573 -m recent --name user:C --rdest --mask fe00:: --set -Filter 869 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 575 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-574 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-574 - inet/filter/limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 - inet6/filter/limit-574 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 + inet/filter/limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-222 + inet6/filter/limit-574 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-222 + inet/filter/logdrop-222 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-222 -m limit --limit 1/second -j LOG + inet/filter/logdrop-222 -j DROP + inet6/filter/logdrop-222 -j DROP + inet/filter/limit-574 -j ACCEPT + inet6/filter/limit-574 -j ACCEPT + +Filter 576 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 inet/filter/logdrop-223 -m limit --limit 1/second -j LOG inet6/filter/logdrop-223 -m limit --limit 1/second -j LOG inet/filter/logdrop-223 -j DROP inet6/filter/logdrop-223 -j DROP - inet/filter/limit-574 -j ACCEPT - inet6/filter/limit-574 -j ACCEPT -Filter 870 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 577 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-224 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-224 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-576 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-576 + inet/filter/limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-224 + inet6/filter/limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-224 inet/filter/logdrop-224 -m limit --limit 1/second -j LOG inet6/filter/logdrop-224 -m limit --limit 1/second -j LOG inet/filter/logdrop-224 -j DROP inet6/filter/logdrop-224 -j DROP - -Filter 871 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} -(filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-576 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-576 - inet/filter/limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-225 - inet6/filter/limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-225 - inet/filter/logdrop-225 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-225 -m limit --limit 1/second -j LOG - inet/filter/logdrop-225 -j DROP - inet6/filter/logdrop-225 -j DROP inet/filter/limit-576 -m limit --limit 1/second -j LOG inet6/filter/limit-576 -m limit --limit 1/second -j LOG inet/filter/limit-576 -j ACCEPT inet6/filter/limit-576 -j ACCEPT -Filter 872 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 578 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-577 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-577 - inet/filter/limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-226 - inet6/filter/limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-226 - inet/filter/logdrop-226 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-226 -m limit --limit 1/second -j LOG - inet/filter/logdrop-226 -j DROP - inet6/filter/logdrop-226 -j DROP + inet/filter/limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-225 + inet6/filter/limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-225 + inet/filter/logdrop-225 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-225 -m limit --limit 1/second -j LOG + inet/filter/logdrop-225 -j DROP + inet6/filter/logdrop-225 -j DROP inet/filter/limit-577 -m limit --limit 1/second -j LOG inet6/filter/limit-577 -m limit --limit 1/second -j LOG -Filter 873 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 579 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-578 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-578 - inet/filter/limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-227 - inet6/filter/limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-227 - inet/filter/logdrop-227 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-227 -m limit --limit 1/second -j LOG - inet/filter/logdrop-227 -j DROP - inet6/filter/logdrop-227 -j DROP + inet/filter/limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-226 + inet6/filter/limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-226 + inet/filter/logdrop-226 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-226 -m limit --limit 1/second -j LOG + inet/filter/logdrop-226 -j DROP + inet6/filter/logdrop-226 -j DROP inet/filter/limit-578 -j ACCEPT inet6/filter/limit-578 -j ACCEPT -Filter 874 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 580 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-228 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-228 - inet/filter/logdrop-228 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-228 -m limit --limit 1/second -j LOG - inet/filter/logdrop-228 -j DROP - inet6/filter/logdrop-228 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-227 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-227 + inet/filter/logdrop-227 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-227 -m limit --limit 1/second -j LOG + inet/filter/logdrop-227 -j DROP + inet6/filter/logdrop-227 -j DROP -Filter 875 {"conn-limit":{"interval":5,"log":false},"in":"_fw","out":"B"} +Filter 581 {"conn-limit":{"interval":5,"log":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-580 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-580 @@ -9136,7 +6877,7 @@ Filter 875 {"conn-limit":{"interval":5,"log":false},"in" inet/filter/limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 876 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","out":"B"} +Filter 582 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-581 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-581 @@ -9145,7 +6886,7 @@ Filter 876 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --set inet6/filter/limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 877 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} +Filter 583 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-582 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-582 @@ -9156,7 +6897,7 @@ Filter 877 {"conn-limit":{"interval":5,"log":false},"in" inet/filter/limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 878 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} +Filter 584 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-583 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-583 @@ -9165,7 +6906,7 @@ Filter 878 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 879 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} +Filter 585 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-584 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-584 @@ -9174,7 +6915,7 @@ Filter 879 {"conn-limit":{"interval":5,"log":false},"in" inet/filter/limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 880 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} +Filter 586 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-585 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-585 @@ -9183,7 +6924,7 @@ Filter 880 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --set inet6/filter/limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 881 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} +Filter 587 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-586 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-586 @@ -9192,7 +6933,7 @@ Filter 881 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 882 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} +Filter 588 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-587 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-587 @@ -9201,7 +6942,7 @@ Filter 882 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 883 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 589 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-588 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-588 @@ -9212,7 +6953,7 @@ Filter 883 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 884 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 590 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-589 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-589 @@ -9221,7 +6962,7 @@ Filter 884 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 885 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 591 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-590 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-590 @@ -9230,7 +6971,7 @@ Filter 885 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 886 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 592 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-591 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-591 @@ -9239,7 +6980,7 @@ Filter 886 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 887 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 593 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-592 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-592 @@ -9248,12 +6989,12 @@ Filter 887 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-592 -j ACCEPT inet6/filter/limit-592 -j ACCEPT -Filter 888 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 594 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 889 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 595 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-594 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-594 @@ -9264,7 +7005,7 @@ Filter 889 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-594 -j ACCEPT inet6/filter/limit-594 -j ACCEPT -Filter 890 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 596 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-595 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-595 @@ -9273,7 +7014,7 @@ Filter 890 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-595 -m limit --limit 1/second -j LOG inet6/filter/limit-595 -m limit --limit 1/second -j LOG -Filter 891 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 597 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-596 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-596 @@ -9282,12 +7023,12 @@ Filter 891 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-596 -j ACCEPT inet6/filter/limit-596 -j ACCEPT -Filter 892 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 598 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 893 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} +Filter 599 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-598 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-598 @@ -9296,7 +7037,7 @@ Filter 893 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 894 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} +Filter 600 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-599 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-599 @@ -9305,7 +7046,7 @@ Filter 894 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 895 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 601 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-600 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-600 @@ -9316,7 +7057,7 @@ Filter 895 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 896 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 602 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-601 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-601 @@ -9325,7 +7066,7 @@ Filter 896 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 897 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 603 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-602 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-602 @@ -9334,7 +7075,7 @@ Filter 897 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 898 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 604 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-603 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-603 @@ -9343,7 +7084,7 @@ Filter 898 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 899 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 605 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-604 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-604 @@ -9352,12 +7093,12 @@ Filter 899 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-604 -j ACCEPT inet6/filter/limit-604 -j ACCEPT -Filter 900 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +Filter 606 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 901 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 607 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-606 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-606 @@ -9368,7 +7109,7 @@ Filter 901 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-606 -j ACCEPT inet6/filter/limit-606 -j ACCEPT -Filter 902 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 608 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-607 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-607 @@ -9377,7 +7118,7 @@ Filter 902 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-607 -m limit --limit 1/second -j LOG inet6/filter/limit-607 -m limit --limit 1/second -j LOG -Filter 903 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 609 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-608 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-608 @@ -9386,12 +7127,12 @@ Filter 903 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-608 -j ACCEPT inet6/filter/limit-608 -j ACCEPT -Filter 904 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 610 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 905 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} +Filter 611 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-610 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-610 @@ -9400,7 +7141,7 @@ Filter 905 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-610 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 906 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} +Filter 612 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-611 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-611 @@ -9409,7 +7150,7 @@ Filter 906 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-611 -m recent --name user:C --rsource --mask fe00:: --set -Filter 907 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 613 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-612 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-612 @@ -9420,7 +7161,7 @@ Filter 907 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-612 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 908 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 614 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-613 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-613 @@ -9429,7 +7170,7 @@ Filter 908 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-613 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 909 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 615 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-614 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-614 @@ -9438,7 +7179,7 @@ Filter 909 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-614 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 910 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 616 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-615 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-615 @@ -9447,7 +7188,7 @@ Filter 910 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-615 -m recent --name user:C --rsource --mask fe00:: --set -Filter 911 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 617 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-616 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-616 @@ -9456,12 +7197,12 @@ Filter 911 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-616 -j ACCEPT inet6/filter/limit-616 -j ACCEPT -Filter 912 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 618 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 913 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 619 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-618 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-618 @@ -9472,7 +7213,7 @@ Filter 913 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-618 -j ACCEPT inet6/filter/limit-618 -j ACCEPT -Filter 914 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 620 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-619 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-619 @@ -9481,7 +7222,7 @@ Filter 914 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-619 -m limit --limit 1/second -j LOG inet6/filter/limit-619 -m limit --limit 1/second -j LOG -Filter 915 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 621 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-620 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-620 @@ -9490,12 +7231,12 @@ Filter 915 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-620 -j ACCEPT inet6/filter/limit-620 -j ACCEPT -Filter 916 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 622 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 917 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} +Filter 623 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-622 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-622 @@ -9504,7 +7245,7 @@ Filter 917 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-622 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 918 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} +Filter 624 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-623 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-623 @@ -9513,7 +7254,7 @@ Filter 918 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-623 -m recent --name user:C --rdest --mask fe00:: --set -Filter 919 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 625 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-624 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-624 @@ -9524,7 +7265,7 @@ Filter 919 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-624 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 920 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 626 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-625 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-625 @@ -9533,7 +7274,7 @@ Filter 920 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-625 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 921 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 627 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-626 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-626 @@ -9542,7 +7283,7 @@ Filter 921 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-626 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 922 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 628 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-627 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-627 @@ -9551,7 +7292,7 @@ Filter 922 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-627 -m recent --name user:C --rdest --mask fe00:: --set -Filter 923 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 629 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-628 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-628 @@ -9560,12 +7301,12 @@ Filter 923 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-628 -j ACCEPT inet6/filter/limit-628 -j ACCEPT -Filter 924 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +Filter 630 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 925 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 631 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-630 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-630 @@ -9576,7 +7317,7 @@ Filter 925 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-630 -j ACCEPT inet6/filter/limit-630 -j ACCEPT -Filter 926 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 632 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-631 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-631 @@ -9585,7 +7326,7 @@ Filter 926 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-631 -m limit --limit 1/second -j LOG inet6/filter/limit-631 -m limit --limit 1/second -j LOG -Filter 927 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 633 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-632 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-632 @@ -9594,12 +7335,12 @@ Filter 927 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-632 -j ACCEPT inet6/filter/limit-632 -j ACCEPT -Filter 928 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 634 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 929 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","out":"B"} +Filter 635 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-634 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-634 @@ -9608,7 +7349,7 @@ Filter 929 {"conn-limit":{"interval":5,"log":"none"},"in inet/filter/limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 930 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","out":"B"} +Filter 636 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-635 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-635 @@ -9617,7 +7358,7 @@ Filter 930 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --set inet6/filter/limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 931 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} +Filter 637 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-636 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-636 @@ -9628,7 +7369,7 @@ Filter 931 {"conn-limit":{"interval":5,"log":"none"},"in inet/filter/limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 932 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} +Filter 638 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-637 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-637 @@ -9637,7 +7378,7 @@ Filter 932 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 933 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} +Filter 639 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-638 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-638 @@ -9646,7 +7387,7 @@ Filter 933 {"conn-limit":{"interval":5,"log":"none"},"in inet/filter/limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 934 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} +Filter 640 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-639 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-639 @@ -9655,7 +7396,7 @@ Filter 934 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --set inet6/filter/limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 935 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} +Filter 641 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-640 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-640 @@ -9664,7 +7405,7 @@ Filter 935 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 936 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} +Filter 642 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-641 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-641 @@ -9673,7 +7414,7 @@ Filter 936 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 937 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 643 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-642 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-642 @@ -9684,7 +7425,7 @@ Filter 937 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 938 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 644 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-643 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-643 @@ -9693,7 +7434,7 @@ Filter 938 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 939 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 645 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-644 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-644 @@ -9702,7 +7443,7 @@ Filter 939 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 940 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 646 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-645 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-645 @@ -9711,7 +7452,7 @@ Filter 940 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 941 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +Filter 647 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-646 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-646 @@ -9720,12 +7461,12 @@ Filter 941 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-646 -j ACCEPT inet6/filter/limit-646 -j ACCEPT -Filter 942 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +Filter 648 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 943 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 649 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-648 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-648 @@ -9736,7 +7477,7 @@ Filter 943 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-648 -j ACCEPT inet6/filter/limit-648 -j ACCEPT -Filter 944 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 650 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-649 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-649 @@ -9745,7 +7486,7 @@ Filter 944 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-649 -m limit --limit 1/second -j LOG inet6/filter/limit-649 -m limit --limit 1/second -j LOG -Filter 945 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 651 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-650 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-650 @@ -9754,12 +7495,12 @@ Filter 945 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-650 -j ACCEPT inet6/filter/limit-650 -j ACCEPT -Filter 946 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 652 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 947 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} +Filter 653 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-652 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-652 @@ -9768,7 +7509,7 @@ Filter 947 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 948 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} +Filter 654 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-653 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-653 @@ -9777,7 +7518,7 @@ Filter 948 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 949 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 655 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-654 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-654 @@ -9788,7 +7529,7 @@ Filter 949 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 950 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} +Filter 656 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-655 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-655 @@ -9797,7 +7538,7 @@ Filter 950 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 951 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 657 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-656 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-656 @@ -9806,7 +7547,7 @@ Filter 951 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 952 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} +Filter 658 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-657 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-657 @@ -9815,7 +7556,7 @@ Filter 952 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 953 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +Filter 659 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-658 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-658 @@ -9824,12 +7565,12 @@ Filter 953 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-658 -j ACCEPT inet6/filter/limit-658 -j ACCEPT -Filter 954 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +Filter 660 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 955 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 661 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-660 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-660 @@ -9840,7 +7581,7 @@ Filter 955 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-660 -j ACCEPT inet6/filter/limit-660 -j ACCEPT -Filter 956 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +Filter 662 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-661 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-661 @@ -9849,7 +7590,7 @@ Filter 956 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-661 -m limit --limit 1/second -j LOG inet6/filter/limit-661 -m limit --limit 1/second -j LOG -Filter 957 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 663 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-662 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-662 @@ -9858,12 +7599,12 @@ Filter 957 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-662 -j ACCEPT inet6/filter/limit-662 -j ACCEPT -Filter 958 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +Filter 664 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 959 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} +Filter 665 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-664 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-664 @@ -9872,7 +7613,7 @@ Filter 959 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-664 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 960 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} +Filter 666 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-665 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-665 @@ -9881,7 +7622,7 @@ Filter 960 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-665 -m recent --name user:C --rsource --mask fe00:: --set -Filter 961 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 667 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-666 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-666 @@ -9892,7 +7633,7 @@ Filter 961 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-666 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 962 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 668 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-667 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-667 @@ -9901,7 +7642,7 @@ Filter 962 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-667 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 963 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 669 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-668 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-668 @@ -9910,7 +7651,7 @@ Filter 963 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-668 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 964 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 670 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-669 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-669 @@ -9919,7 +7660,7 @@ Filter 964 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-669 -m recent --name user:C --rsource --mask fe00:: --set -Filter 965 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +Filter 671 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-670 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-670 @@ -9928,12 +7669,12 @@ Filter 965 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-670 -j ACCEPT inet6/filter/limit-670 -j ACCEPT -Filter 966 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +Filter 672 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 967 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 673 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-672 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-672 @@ -9944,7 +7685,7 @@ Filter 967 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-672 -j ACCEPT inet6/filter/limit-672 -j ACCEPT -Filter 968 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 674 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-673 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-673 @@ -9953,7 +7694,7 @@ Filter 968 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-673 -m limit --limit 1/second -j LOG inet6/filter/limit-673 -m limit --limit 1/second -j LOG -Filter 969 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 675 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-674 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-674 @@ -9962,12 +7703,12 @@ Filter 969 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-674 -j ACCEPT inet6/filter/limit-674 -j ACCEPT -Filter 970 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 676 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 971 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} +Filter 677 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-676 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-676 @@ -9976,7 +7717,7 @@ Filter 971 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-676 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 972 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} +Filter 678 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-677 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-677 @@ -9985,7 +7726,7 @@ Filter 972 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-677 -m recent --name user:C --rdest --mask fe00:: --set -Filter 973 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 679 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-678 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-678 @@ -9996,7 +7737,7 @@ Filter 973 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-678 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 974 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} +Filter 680 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-679 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-679 @@ -10005,7 +7746,7 @@ Filter 974 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-679 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 975 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 681 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-680 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-680 @@ -10014,7 +7755,7 @@ Filter 975 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-680 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 976 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} +Filter 682 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-681 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-681 @@ -10023,7 +7764,7 @@ Filter 976 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-681 -m recent --name user:C --rdest --mask fe00:: --set -Filter 977 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +Filter 683 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-682 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-682 @@ -10032,12 +7773,12 @@ Filter 977 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-682 -j ACCEPT inet6/filter/limit-682 -j ACCEPT -Filter 978 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +Filter 684 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 979 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 685 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-684 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-684 @@ -10048,7 +7789,7 @@ Filter 979 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-684 -j ACCEPT inet6/filter/limit-684 -j ACCEPT -Filter 980 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +Filter 686 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-685 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-685 @@ -10057,7 +7798,7 @@ Filter 980 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-685 -m limit --limit 1/second -j LOG inet6/filter/limit-685 -m limit --limit 1/second -j LOG -Filter 981 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 687 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-686 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-686 @@ -10066,12 +7807,12 @@ Filter 981 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-686 -j ACCEPT inet6/filter/limit-686 -j ACCEPT -Filter 982 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +Filter 688 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 983 {"conn-limit":150,"in":"_fw","out":"B"} +Filter 689 {"conn-limit":150,"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-688 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-688 @@ -10082,7 +7823,7 @@ Filter 983 {"conn-limit":150,"in":"_fw","out":"B"} inet/filter/limit-688 -j DROP inet6/filter/limit-688 -j DROP -Filter 984 {"action":"pass","conn-limit":150,"in":"_fw","out":"B"} +Filter 690 {"action":"pass","conn-limit":150,"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-689 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-689 @@ -10093,22 +7834,22 @@ Filter 984 {"action":"pass","conn-limit":150,"in":"_fw", inet/filter/limit-689 -j DROP inet6/filter/limit-689 -j DROP -Filter 985 {"conn-limit":150,"in":"_fw","log":true,"out":"B"} +Filter 691 {"conn-limit":150,"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-690 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-690 - inet/filter/limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-690 -j logaccept-70 - inet6/filter/limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-690 -j logaccept-70 - inet/filter/logaccept-70 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-70 -m limit --limit 1/second -j LOG - inet/filter/logaccept-70 -j ACCEPT - inet6/filter/logaccept-70 -j ACCEPT + inet/filter/limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-690 -j logaccept-7 + inet6/filter/limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-690 -j logaccept-7 + inet/filter/logaccept-7 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-7 -m limit --limit 1/second -j LOG + inet/filter/logaccept-7 -j ACCEPT + inet6/filter/logaccept-7 -j ACCEPT inet/filter/limit-690 -m limit --limit 1/second -j LOG inet6/filter/limit-690 -m limit --limit 1/second -j LOG inet/filter/limit-690 -j DROP inet6/filter/limit-690 -j DROP -Filter 986 {"conn-limit":150,"in":"_fw","log":"none","out":"B"} +Filter 692 {"conn-limit":150,"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-691 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-691 @@ -10119,7 +7860,7 @@ Filter 986 {"conn-limit":150,"in":"_fw","log":"none","ou inet/filter/limit-691 -j DROP inet6/filter/limit-691 -j DROP -Filter 987 {"conn-limit":{"count":150},"in":"_fw","out":"B"} +Filter 693 {"conn-limit":{"count":150},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-692 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-692 @@ -10130,7 +7871,7 @@ Filter 987 {"conn-limit":{"count":150},"in":"_fw","out": inet/filter/limit-692 -j DROP inet6/filter/limit-692 -j DROP -Filter 988 {"action":"pass","conn-limit":{"count":150},"in":"_fw","out":"B"} +Filter 694 {"action":"pass","conn-limit":{"count":150},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-693 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-693 @@ -10141,22 +7882,22 @@ Filter 988 {"action":"pass","conn-limit":{"count":150}," inet/filter/limit-693 -j DROP inet6/filter/limit-693 -j DROP -Filter 989 {"conn-limit":{"count":150},"in":"_fw","log":true,"out":"B"} +Filter 695 {"conn-limit":{"count":150},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-694 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-694 - inet/filter/limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-694 -j logaccept-71 - inet6/filter/limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-694 -j logaccept-71 - inet/filter/logaccept-71 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-71 -m limit --limit 1/second -j LOG - inet/filter/logaccept-71 -j ACCEPT - inet6/filter/logaccept-71 -j ACCEPT + inet/filter/limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-694 -j logaccept-8 + inet6/filter/limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-694 -j logaccept-8 + inet/filter/logaccept-8 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-8 -m limit --limit 1/second -j LOG + inet/filter/logaccept-8 -j ACCEPT + inet6/filter/logaccept-8 -j ACCEPT inet/filter/limit-694 -m limit --limit 1/second -j LOG inet6/filter/limit-694 -m limit --limit 1/second -j LOG inet/filter/limit-694 -j DROP inet6/filter/limit-694 -j DROP -Filter 990 {"conn-limit":{"count":150},"in":"_fw","log":"none","out":"B"} +Filter 696 {"conn-limit":{"count":150},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-695 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-695 @@ -10167,7 +7908,7 @@ Filter 990 {"conn-limit":{"count":150},"in":"_fw","log": inet/filter/limit-695 -j DROP inet6/filter/limit-695 -j DROP -Filter 991 {"conn-limit":{"count":150,"log":false},"in":"_fw","out":"B"} +Filter 697 {"conn-limit":{"count":150,"log":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-696 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-696 @@ -10176,7 +7917,7 @@ Filter 991 {"conn-limit":{"count":150,"log":false},"in": inet/filter/limit-696 -j DROP inet6/filter/limit-696 -j DROP -Filter 992 {"action":"pass","conn-limit":{"count":150,"log":false},"in":"_fw","out":"B"} +Filter 698 {"action":"pass","conn-limit":{"count":150,"log":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-697 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-697 @@ -10185,20 +7926,20 @@ Filter 992 {"action":"pass","conn-limit":{"count":150,"l inet/filter/limit-697 -j DROP inet6/filter/limit-697 -j DROP -Filter 993 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":true,"out":"B"} +Filter 699 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-698 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-698 - inet/filter/limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-698 -j logaccept-72 - inet6/filter/limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-698 -j logaccept-72 - inet/filter/logaccept-72 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-72 -m limit --limit 1/second -j LOG - inet/filter/logaccept-72 -j ACCEPT - inet6/filter/logaccept-72 -j ACCEPT + inet/filter/limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-698 -j logaccept-9 + inet6/filter/limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-698 -j logaccept-9 + inet/filter/logaccept-9 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-9 -m limit --limit 1/second -j LOG + inet/filter/logaccept-9 -j ACCEPT + inet6/filter/logaccept-9 -j ACCEPT inet/filter/limit-698 -j DROP inet6/filter/limit-698 -j DROP -Filter 994 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":"none","out":"B"} +Filter 700 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-699 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-699 @@ -10207,7 +7948,7 @@ Filter 994 {"conn-limit":{"count":150,"log":false},"in": inet/filter/limit-699 -j DROP inet6/filter/limit-699 -j DROP -Filter 995 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","out":"B"} +Filter 701 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-700 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-700 @@ -10216,7 +7957,7 @@ Filter 995 {"conn-limit":{"count":150,"log":"none"},"in" inet/filter/limit-700 -j DROP inet6/filter/limit-700 -j DROP -Filter 996 {"action":"pass","conn-limit":{"count":150,"log":"none"},"in":"_fw","out":"B"} +Filter 702 {"action":"pass","conn-limit":{"count":150,"log":"none"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-701 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-701 @@ -10225,20 +7966,20 @@ Filter 996 {"action":"pass","conn-limit":{"count":150,"l inet/filter/limit-701 -j DROP inet6/filter/limit-701 -j DROP -Filter 997 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":true,"out":"B"} +Filter 703 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-702 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-702 - inet/filter/limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-702 -j logaccept-73 - inet6/filter/limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-702 -j logaccept-73 - inet/filter/logaccept-73 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-73 -m limit --limit 1/second -j LOG - inet/filter/logaccept-73 -j ACCEPT - inet6/filter/logaccept-73 -j ACCEPT + inet/filter/limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-702 -j logaccept-10 + inet6/filter/limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-702 -j logaccept-10 + inet/filter/logaccept-10 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-10 -m limit --limit 1/second -j LOG + inet/filter/logaccept-10 -j ACCEPT + inet6/filter/logaccept-10 -j ACCEPT inet/filter/limit-702 -j DROP inet6/filter/limit-702 -j DROP -Filter 998 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":"none","out":"B"} +Filter 704 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-703 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-703 @@ -10247,7 +7988,7 @@ Filter 998 {"conn-limit":{"count":150,"log":"none"},"in" inet/filter/limit-703 -j DROP inet6/filter/limit-703 -j DROP -Filter 999 {"conn-limit":{"count":150,"interval":5},"in":"_fw","out":"B"} +Filter 705 {"conn-limit":{"count":150,"interval":5},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-704 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-704 @@ -10258,7 +7999,7 @@ Filter 999 {"conn-limit":{"count":150,"interval":5},"in" inet/filter/limit-704 -j DROP inet6/filter/limit-704 -j DROP -Filter 1000 {"action":"pass","conn-limit":{"count":150,"interval":5},"in":"_fw","out":"B"} +Filter 706 {"action":"pass","conn-limit":{"count":150,"interval":5},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-705 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-705 @@ -10269,22 +8010,22 @@ Filter 1000 {"action":"pass","conn-limit":{"count":150,"i inet/filter/limit-705 -j DROP inet6/filter/limit-705 -j DROP -Filter 1001 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":true,"out":"B"} +Filter 707 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-706 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-706 - inet/filter/limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-706 -j logaccept-74 - inet6/filter/limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-706 -j logaccept-74 - inet/filter/logaccept-74 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-74 -m limit --limit 1/second -j LOG - inet/filter/logaccept-74 -j ACCEPT - inet6/filter/logaccept-74 -j ACCEPT + inet/filter/limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-706 -j logaccept-11 + inet6/filter/limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-706 -j logaccept-11 + inet/filter/logaccept-11 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-11 -m limit --limit 1/second -j LOG + inet/filter/logaccept-11 -j ACCEPT + inet6/filter/logaccept-11 -j ACCEPT inet/filter/limit-706 -m limit --limit 1/second -j LOG inet6/filter/limit-706 -m limit --limit 1/second -j LOG inet/filter/limit-706 -j DROP inet6/filter/limit-706 -j DROP -Filter 1002 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":"none","out":"B"} +Filter 708 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-707 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-707 @@ -10295,7 +8036,7 @@ Filter 1002 {"conn-limit":{"count":150,"interval":5},"in" inet/filter/limit-707 -j DROP inet6/filter/limit-707 -j DROP -Filter 1003 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","out":"B"} +Filter 709 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-708 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-708 @@ -10304,7 +8045,7 @@ Filter 1003 {"conn-limit":{"count":150,"interval":5,"log" inet/filter/limit-708 -j DROP inet6/filter/limit-708 -j DROP -Filter 1004 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","out":"B"} +Filter 710 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-709 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-709 @@ -10313,20 +8054,20 @@ Filter 1004 {"action":"pass","conn-limit":{"count":150,"i inet/filter/limit-709 -j DROP inet6/filter/limit-709 -j DROP -Filter 1005 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} +Filter 711 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-710 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-710 - inet/filter/limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-710 -j logaccept-75 - inet6/filter/limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-710 -j logaccept-75 - inet/filter/logaccept-75 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-75 -m limit --limit 1/second -j LOG - inet/filter/logaccept-75 -j ACCEPT - inet6/filter/logaccept-75 -j ACCEPT + inet/filter/limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-710 -j logaccept-12 + inet6/filter/limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-710 -j logaccept-12 + inet/filter/logaccept-12 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-12 -m limit --limit 1/second -j LOG + inet/filter/logaccept-12 -j ACCEPT + inet6/filter/logaccept-12 -j ACCEPT inet/filter/limit-710 -j DROP inet6/filter/limit-710 -j DROP -Filter 1006 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} +Filter 712 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-711 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-711 @@ -10335,7 +8076,7 @@ Filter 1006 {"conn-limit":{"count":150,"interval":5,"log" inet/filter/limit-711 -j DROP inet6/filter/limit-711 -j DROP -Filter 1007 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","out":"B"} +Filter 713 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-712 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-712 @@ -10344,7 +8085,7 @@ Filter 1007 {"conn-limit":{"count":150,"interval":5,"log" inet/filter/limit-712 -j DROP inet6/filter/limit-712 -j DROP -Filter 1008 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","out":"B"} +Filter 714 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-713 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-713 @@ -10353,20 +8094,20 @@ Filter 1008 {"action":"pass","conn-limit":{"count":150,"i inet/filter/limit-713 -j DROP inet6/filter/limit-713 -j DROP -Filter 1009 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} +Filter 715 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-714 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-714 - inet/filter/limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-714 -j logaccept-76 - inet6/filter/limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-714 -j logaccept-76 - inet/filter/logaccept-76 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-76 -m limit --limit 1/second -j LOG - inet/filter/logaccept-76 -j ACCEPT - inet6/filter/logaccept-76 -j ACCEPT + inet/filter/limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-714 -j logaccept-13 + inet6/filter/limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-714 -j logaccept-13 + inet/filter/logaccept-13 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-13 -m limit --limit 1/second -j LOG + inet/filter/logaccept-13 -j ACCEPT + inet6/filter/logaccept-13 -j ACCEPT inet/filter/limit-714 -j DROP inet6/filter/limit-714 -j DROP -Filter 1010 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} +Filter 716 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-715 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-715 @@ -10375,7 +8116,7 @@ Filter 1010 {"conn-limit":{"count":150,"interval":5,"log" inet/filter/limit-715 -j DROP inet6/filter/limit-715 -j DROP -Filter 1011 {"flow-limit":1} +Filter 717 {"flow-limit":1} (filter-limit) inet/filter/FORWARD -j limit-716 inet6/filter/FORWARD -j limit-716 @@ -10383,12 +8124,12 @@ Filter 1011 {"flow-limit":1} inet6/filter/INPUT -j limit-716 inet/filter/OUTPUT -j limit-716 inet6/filter/OUTPUT -j limit-716 - inet/filter/limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 - inet6/filter/limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 - inet/filter/logdrop-229 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-229 -m limit --limit 1/second -j LOG - inet/filter/logdrop-229 -j DROP - inet6/filter/logdrop-229 -j DROP + inet/filter/limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-228 + inet6/filter/limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-228 + inet/filter/logdrop-228 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-228 -m limit --limit 1/second -j LOG + inet/filter/logdrop-228 -j DROP + inet6/filter/logdrop-228 -j DROP inet/filter/limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --set inet6/filter/limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT @@ -10398,7 +8139,7 @@ Filter 1011 {"flow-limit":1} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1012 {"action":"pass","flow-limit":1} +Filter 718 {"action":"pass","flow-limit":1} (filter-limit) inet/filter/FORWARD -j limit-717 inet6/filter/FORWARD -j limit-717 @@ -10406,16 +8147,16 @@ Filter 1012 {"action":"pass","flow-limit":1} inet6/filter/INPUT -j limit-717 inet/filter/OUTPUT -j limit-717 inet6/filter/OUTPUT -j limit-717 - inet/filter/limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-230 - inet6/filter/limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-230 - inet/filter/logdrop-230 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-230 -m limit --limit 1/second -j LOG - inet/filter/logdrop-230 -j DROP - inet6/filter/logdrop-230 -j DROP + inet/filter/limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 + inet6/filter/limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 + inet/filter/logdrop-229 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-229 -m limit --limit 1/second -j LOG + inet/filter/logdrop-229 -j DROP + inet6/filter/logdrop-229 -j DROP inet/filter/limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --set inet6/filter/limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1013 {"flow-limit":1,"log":true} +Filter 719 {"flow-limit":1,"log":true} (filter-limit) inet/filter/FORWARD -j limit-718 inet6/filter/FORWARD -j limit-718 @@ -10423,12 +8164,12 @@ Filter 1013 {"flow-limit":1,"log":true} inet6/filter/INPUT -j limit-718 inet/filter/OUTPUT -j limit-718 inet6/filter/OUTPUT -j limit-718 - inet/filter/limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-231 - inet6/filter/limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-231 - inet/filter/logdrop-231 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-231 -m limit --limit 1/second -j LOG - inet/filter/logdrop-231 -j DROP - inet6/filter/logdrop-231 -j DROP + inet/filter/limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-230 + inet6/filter/limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-230 + inet/filter/logdrop-230 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-230 -m limit --limit 1/second -j LOG + inet/filter/logdrop-230 -j DROP + inet6/filter/logdrop-230 -j DROP inet/filter/limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --set inet6/filter/limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-0 @@ -10442,7 +8183,7 @@ Filter 1013 {"flow-limit":1,"log":true} inet/filter/logaccept-final-0 -j ACCEPT inet6/filter/logaccept-final-0 -j ACCEPT -Filter 1014 {"action":"pass","flow-limit":1,"log":true} +Filter 720 {"action":"pass","flow-limit":1,"log":true} (filter-limit) inet/filter/FORWARD -j limit-719 inet6/filter/FORWARD -j limit-719 @@ -10450,16 +8191,16 @@ Filter 1014 {"action":"pass","flow-limit":1,"log":true} inet6/filter/INPUT -j limit-719 inet/filter/OUTPUT -j limit-719 inet6/filter/OUTPUT -j limit-719 - inet/filter/limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-232 - inet6/filter/limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-232 - inet/filter/logdrop-232 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-232 -m limit --limit 1/second -j LOG - inet/filter/logdrop-232 -j DROP - inet6/filter/logdrop-232 -j DROP + inet/filter/limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-231 + inet6/filter/limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-231 + inet/filter/logdrop-231 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-231 -m limit --limit 1/second -j LOG + inet/filter/logdrop-231 -j DROP + inet6/filter/logdrop-231 -j DROP inet/filter/limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1015 {"flow-limit":1,"log":"none"} +Filter 721 {"flow-limit":1,"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-720 inet6/filter/FORWARD -j limit-720 @@ -10467,12 +8208,12 @@ Filter 1015 {"flow-limit":1,"log":"none"} inet6/filter/INPUT -j limit-720 inet/filter/OUTPUT -j limit-720 inet6/filter/OUTPUT -j limit-720 - inet/filter/limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-233 - inet6/filter/limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-233 - inet/filter/logdrop-233 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-233 -m limit --limit 1/second -j LOG - inet/filter/logdrop-233 -j DROP - inet6/filter/logdrop-233 -j DROP + inet/filter/limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-232 + inet6/filter/limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-232 + inet/filter/logdrop-232 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-232 -m limit --limit 1/second -j LOG + inet/filter/logdrop-232 -j DROP + inet6/filter/logdrop-232 -j DROP inet/filter/limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --set inet6/filter/limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT @@ -10482,7 +8223,7 @@ Filter 1015 {"flow-limit":1,"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1016 {"action":"pass","flow-limit":1,"log":"none"} +Filter 722 {"action":"pass","flow-limit":1,"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-721 inet6/filter/FORWARD -j limit-721 @@ -10490,16 +8231,16 @@ Filter 1016 {"action":"pass","flow-limit":1,"log":"none"} inet6/filter/INPUT -j limit-721 inet/filter/OUTPUT -j limit-721 inet6/filter/OUTPUT -j limit-721 - inet/filter/limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-234 - inet6/filter/limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-234 - inet/filter/logdrop-234 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-234 -m limit --limit 1/second -j LOG - inet/filter/logdrop-234 -j DROP - inet6/filter/logdrop-234 -j DROP + inet/filter/limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-233 + inet6/filter/limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-233 + inet/filter/logdrop-233 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-233 -m limit --limit 1/second -j LOG + inet/filter/logdrop-233 -j DROP + inet6/filter/logdrop-233 -j DROP inet/filter/limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --set inet6/filter/limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1017 {"flow-limit":{}} +Filter 723 {"flow-limit":{}} (filter-limit) inet/filter/FORWARD -j limit-722 inet6/filter/FORWARD -j limit-722 @@ -10507,12 +8248,12 @@ Filter 1017 {"flow-limit":{}} inet6/filter/INPUT -j limit-722 inet/filter/OUTPUT -j limit-722 inet6/filter/OUTPUT -j limit-722 - inet/filter/limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-235 - inet6/filter/limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-235 - inet/filter/logdrop-235 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-235 -m limit --limit 1/second -j LOG - inet/filter/logdrop-235 -j DROP - inet6/filter/logdrop-235 -j DROP + inet/filter/limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-234 + inet6/filter/limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-234 + inet/filter/logdrop-234 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-234 -m limit --limit 1/second -j LOG + inet/filter/logdrop-234 -j DROP + inet6/filter/logdrop-234 -j DROP inet/filter/limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --set inet6/filter/limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT @@ -10522,7 +8263,7 @@ Filter 1017 {"flow-limit":{}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1018 {"action":"pass","flow-limit":{}} +Filter 724 {"action":"pass","flow-limit":{}} (filter-limit) inet/filter/FORWARD -j limit-723 inet6/filter/FORWARD -j limit-723 @@ -10530,16 +8271,16 @@ Filter 1018 {"action":"pass","flow-limit":{}} inet6/filter/INPUT -j limit-723 inet/filter/OUTPUT -j limit-723 inet6/filter/OUTPUT -j limit-723 - inet/filter/limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-236 - inet6/filter/limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-236 - inet/filter/logdrop-236 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-236 -m limit --limit 1/second -j LOG - inet/filter/logdrop-236 -j DROP - inet6/filter/logdrop-236 -j DROP + inet/filter/limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-235 + inet6/filter/limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-235 + inet/filter/logdrop-235 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-235 -m limit --limit 1/second -j LOG + inet/filter/logdrop-235 -j DROP + inet6/filter/logdrop-235 -j DROP inet/filter/limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --set inet6/filter/limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1019 {"flow-limit":{},"log":true} +Filter 725 {"flow-limit":{},"log":true} (filter-limit) inet/filter/FORWARD -j limit-724 inet6/filter/FORWARD -j limit-724 @@ -10547,12 +8288,12 @@ Filter 1019 {"flow-limit":{},"log":true} inet6/filter/INPUT -j limit-724 inet/filter/OUTPUT -j limit-724 inet6/filter/OUTPUT -j limit-724 - inet/filter/limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-237 - inet6/filter/limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-237 - inet/filter/logdrop-237 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-237 -m limit --limit 1/second -j LOG - inet/filter/logdrop-237 -j DROP - inet6/filter/logdrop-237 -j DROP + inet/filter/limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-236 + inet6/filter/limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-236 + inet/filter/logdrop-236 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-236 -m limit --limit 1/second -j LOG + inet/filter/logdrop-236 -j DROP + inet6/filter/logdrop-236 -j DROP inet/filter/limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --set inet6/filter/limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-1 @@ -10566,7 +8307,7 @@ Filter 1019 {"flow-limit":{},"log":true} inet/filter/logaccept-final-1 -j ACCEPT inet6/filter/logaccept-final-1 -j ACCEPT -Filter 1020 {"action":"pass","flow-limit":{},"log":true} +Filter 726 {"action":"pass","flow-limit":{},"log":true} (filter-limit) inet/filter/FORWARD -j limit-725 inet6/filter/FORWARD -j limit-725 @@ -10574,16 +8315,16 @@ Filter 1020 {"action":"pass","flow-limit":{},"log":true} inet6/filter/INPUT -j limit-725 inet/filter/OUTPUT -j limit-725 inet6/filter/OUTPUT -j limit-725 - inet/filter/limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-238 - inet6/filter/limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-238 - inet/filter/logdrop-238 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-238 -m limit --limit 1/second -j LOG - inet/filter/logdrop-238 -j DROP - inet6/filter/logdrop-238 -j DROP + inet/filter/limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-237 + inet6/filter/limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-237 + inet/filter/logdrop-237 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-237 -m limit --limit 1/second -j LOG + inet/filter/logdrop-237 -j DROP + inet6/filter/logdrop-237 -j DROP inet/filter/limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1021 {"flow-limit":{},"log":"none"} +Filter 727 {"flow-limit":{},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-726 inet6/filter/FORWARD -j limit-726 @@ -10591,12 +8332,12 @@ Filter 1021 {"flow-limit":{},"log":"none"} inet6/filter/INPUT -j limit-726 inet/filter/OUTPUT -j limit-726 inet6/filter/OUTPUT -j limit-726 - inet/filter/limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-239 - inet6/filter/limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-239 - inet/filter/logdrop-239 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-239 -m limit --limit 1/second -j LOG - inet/filter/logdrop-239 -j DROP - inet6/filter/logdrop-239 -j DROP + inet/filter/limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-238 + inet6/filter/limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-238 + inet/filter/logdrop-238 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-238 -m limit --limit 1/second -j LOG + inet/filter/logdrop-238 -j DROP + inet6/filter/logdrop-238 -j DROP inet/filter/limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --set inet6/filter/limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT @@ -10606,7 +8347,7 @@ Filter 1021 {"flow-limit":{},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1022 {"action":"pass","flow-limit":{},"log":"none"} +Filter 728 {"action":"pass","flow-limit":{},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-727 inet6/filter/FORWARD -j limit-727 @@ -10614,16 +8355,16 @@ Filter 1022 {"action":"pass","flow-limit":{},"log":"none" inet6/filter/INPUT -j limit-727 inet/filter/OUTPUT -j limit-727 inet6/filter/OUTPUT -j limit-727 - inet/filter/limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-240 - inet6/filter/limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-240 - inet/filter/logdrop-240 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-240 -m limit --limit 1/second -j LOG - inet/filter/logdrop-240 -j DROP - inet6/filter/logdrop-240 -j DROP + inet/filter/limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-239 + inet6/filter/limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-239 + inet/filter/logdrop-239 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-239 -m limit --limit 1/second -j LOG + inet/filter/logdrop-239 -j DROP + inet6/filter/logdrop-239 -j DROP inet/filter/limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --set inet6/filter/limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1023 {"flow-limit":{"name":"A"}} +Filter 729 {"flow-limit":{"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-728 inet6/filter/FORWARD -j limit-728 @@ -10631,12 +8372,12 @@ Filter 1023 {"flow-limit":{"name":"A"}} inet6/filter/INPUT -j limit-728 inet/filter/OUTPUT -j limit-728 inet6/filter/OUTPUT -j limit-728 - inet/filter/limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-241 - inet6/filter/limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-241 - inet/filter/logdrop-241 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-241 -m limit --limit 1/second -j LOG - inet/filter/logdrop-241 -j DROP - inet6/filter/logdrop-241 -j DROP + inet/filter/limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-240 + inet6/filter/limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-240 + inet/filter/logdrop-240 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-240 -m limit --limit 1/second -j LOG + inet/filter/logdrop-240 -j DROP + inet6/filter/logdrop-240 -j DROP inet/filter/limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT @@ -10646,7 +8387,7 @@ Filter 1023 {"flow-limit":{"name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1024 {"action":"pass","flow-limit":{"name":"A"}} +Filter 730 {"action":"pass","flow-limit":{"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-729 inet6/filter/FORWARD -j limit-729 @@ -10654,16 +8395,16 @@ Filter 1024 {"action":"pass","flow-limit":{"name":"A"}} inet6/filter/INPUT -j limit-729 inet/filter/OUTPUT -j limit-729 inet6/filter/OUTPUT -j limit-729 - inet/filter/limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-242 - inet6/filter/limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-242 - inet/filter/logdrop-242 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-242 -m limit --limit 1/second -j LOG - inet/filter/logdrop-242 -j DROP - inet6/filter/logdrop-242 -j DROP + inet/filter/limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-241 + inet6/filter/limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-241 + inet/filter/logdrop-241 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-241 -m limit --limit 1/second -j LOG + inet/filter/logdrop-241 -j DROP + inet6/filter/logdrop-241 -j DROP inet/filter/limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1025 {"flow-limit":{"name":"A"},"log":true} +Filter 731 {"flow-limit":{"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-730 inet6/filter/FORWARD -j limit-730 @@ -10671,12 +8412,12 @@ Filter 1025 {"flow-limit":{"name":"A"},"log":true} inet6/filter/INPUT -j limit-730 inet/filter/OUTPUT -j limit-730 inet6/filter/OUTPUT -j limit-730 - inet/filter/limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-243 - inet6/filter/limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-243 - inet/filter/logdrop-243 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-243 -m limit --limit 1/second -j LOG - inet/filter/logdrop-243 -j DROP - inet6/filter/logdrop-243 -j DROP + inet/filter/limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-242 + inet6/filter/limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-242 + inet/filter/logdrop-242 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-242 -m limit --limit 1/second -j LOG + inet/filter/logdrop-242 -j DROP + inet6/filter/logdrop-242 -j DROP inet/filter/limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-2 @@ -10690,7 +8431,7 @@ Filter 1025 {"flow-limit":{"name":"A"},"log":true} inet/filter/logaccept-final-2 -j ACCEPT inet6/filter/logaccept-final-2 -j ACCEPT -Filter 1026 {"action":"pass","flow-limit":{"name":"A"},"log":true} +Filter 732 {"action":"pass","flow-limit":{"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-731 inet6/filter/FORWARD -j limit-731 @@ -10698,16 +8439,16 @@ Filter 1026 {"action":"pass","flow-limit":{"name":"A"},"l inet6/filter/INPUT -j limit-731 inet/filter/OUTPUT -j limit-731 inet6/filter/OUTPUT -j limit-731 - inet/filter/limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-244 - inet6/filter/limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-244 - inet/filter/logdrop-244 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-244 -m limit --limit 1/second -j LOG - inet/filter/logdrop-244 -j DROP - inet6/filter/logdrop-244 -j DROP + inet/filter/limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-243 + inet6/filter/limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-243 + inet/filter/logdrop-243 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-243 -m limit --limit 1/second -j LOG + inet/filter/logdrop-243 -j DROP + inet6/filter/logdrop-243 -j DROP inet/filter/limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1027 {"flow-limit":{"name":"A"},"log":"none"} +Filter 733 {"flow-limit":{"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-732 inet6/filter/FORWARD -j limit-732 @@ -10715,12 +8456,12 @@ Filter 1027 {"flow-limit":{"name":"A"},"log":"none"} inet6/filter/INPUT -j limit-732 inet/filter/OUTPUT -j limit-732 inet6/filter/OUTPUT -j limit-732 - inet/filter/limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-245 - inet6/filter/limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-245 - inet/filter/logdrop-245 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-245 -m limit --limit 1/second -j LOG - inet/filter/logdrop-245 -j DROP - inet6/filter/logdrop-245 -j DROP + inet/filter/limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-244 + inet6/filter/limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-244 + inet/filter/logdrop-244 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-244 -m limit --limit 1/second -j LOG + inet/filter/logdrop-244 -j DROP + inet6/filter/logdrop-244 -j DROP inet/filter/limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT @@ -10730,7 +8471,7 @@ Filter 1027 {"flow-limit":{"name":"A"},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1028 {"action":"pass","flow-limit":{"name":"A"},"log":"none"} +Filter 734 {"action":"pass","flow-limit":{"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-733 inet6/filter/FORWARD -j limit-733 @@ -10738,16 +8479,16 @@ Filter 1028 {"action":"pass","flow-limit":{"name":"A"},"l inet6/filter/INPUT -j limit-733 inet/filter/OUTPUT -j limit-733 inet6/filter/OUTPUT -j limit-733 - inet/filter/limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-246 - inet6/filter/limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-246 - inet/filter/logdrop-246 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-246 -m limit --limit 1/second -j LOG - inet/filter/logdrop-246 -j DROP - inet6/filter/logdrop-246 -j DROP + inet/filter/limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-245 + inet6/filter/limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-245 + inet/filter/logdrop-245 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-245 -m limit --limit 1/second -j LOG + inet/filter/logdrop-245 -j DROP + inet6/filter/logdrop-245 -j DROP inet/filter/limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1029 {"flow-limit":{"name":"A","update":false}} +Filter 735 {"flow-limit":{"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-734 inet6/filter/FORWARD -j limit-734 @@ -10755,12 +8496,12 @@ Filter 1029 {"flow-limit":{"name":"A","update":false}} inet6/filter/INPUT -j limit-734 inet/filter/OUTPUT -j limit-734 inet6/filter/OUTPUT -j limit-734 - inet/filter/limit-734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-247 - inet6/filter/limit-734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-247 - inet/filter/logdrop-247 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-247 -m limit --limit 1/second -j LOG - inet/filter/logdrop-247 -j DROP - inet6/filter/logdrop-247 -j DROP + inet/filter/limit-734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-246 + inet6/filter/limit-734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-246 + inet/filter/logdrop-246 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-246 -m limit --limit 1/second -j LOG + inet/filter/logdrop-246 -j DROP + inet6/filter/logdrop-246 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -10768,7 +8509,7 @@ Filter 1029 {"flow-limit":{"name":"A","update":false}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1030 {"action":"pass","flow-limit":{"name":"A","update":false}} +Filter 736 {"action":"pass","flow-limit":{"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-735 inet6/filter/FORWARD -j limit-735 @@ -10776,14 +8517,14 @@ Filter 1030 {"action":"pass","flow-limit":{"name":"A","up inet6/filter/INPUT -j limit-735 inet/filter/OUTPUT -j limit-735 inet6/filter/OUTPUT -j limit-735 - inet/filter/limit-735 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 - inet6/filter/limit-735 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 - inet/filter/logdrop-248 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-248 -m limit --limit 1/second -j LOG - inet/filter/logdrop-248 -j DROP - inet6/filter/logdrop-248 -j DROP + inet/filter/limit-735 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-247 + inet6/filter/limit-735 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-247 + inet/filter/logdrop-247 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-247 -m limit --limit 1/second -j LOG + inet/filter/logdrop-247 -j DROP + inet6/filter/logdrop-247 -j DROP -Filter 1031 {"flow-limit":{"name":"A","update":false},"log":true} +Filter 737 {"flow-limit":{"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-736 inet6/filter/FORWARD -j limit-736 @@ -10791,12 +8532,12 @@ Filter 1031 {"flow-limit":{"name":"A","update":false},"lo inet6/filter/INPUT -j limit-736 inet/filter/OUTPUT -j limit-736 inet6/filter/OUTPUT -j limit-736 - inet/filter/limit-736 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-249 - inet6/filter/limit-736 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-249 - inet/filter/logdrop-249 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-249 -m limit --limit 1/second -j LOG - inet/filter/logdrop-249 -j DROP - inet6/filter/logdrop-249 -j DROP + inet/filter/limit-736 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 + inet6/filter/limit-736 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 + inet/filter/logdrop-248 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-248 -m limit --limit 1/second -j LOG + inet/filter/logdrop-248 -j DROP + inet6/filter/logdrop-248 -j DROP inet/filter/FORWARD -j logaccept-final-3 inet6/filter/FORWARD -j logaccept-final-3 inet/filter/INPUT -j logaccept-final-3 @@ -10808,7 +8549,7 @@ Filter 1031 {"flow-limit":{"name":"A","update":false},"lo inet/filter/logaccept-final-3 -j ACCEPT inet6/filter/logaccept-final-3 -j ACCEPT -Filter 1032 {"action":"pass","flow-limit":{"name":"A","update":false},"log":true} +Filter 738 {"action":"pass","flow-limit":{"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-737 inet6/filter/FORWARD -j limit-737 @@ -10816,16 +8557,16 @@ Filter 1032 {"action":"pass","flow-limit":{"name":"A","up inet6/filter/INPUT -j limit-737 inet/filter/OUTPUT -j limit-737 inet6/filter/OUTPUT -j limit-737 - inet/filter/limit-737 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 - inet6/filter/limit-737 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-250 - inet/filter/logdrop-250 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-250 -m limit --limit 1/second -j LOG - inet/filter/logdrop-250 -j DROP - inet6/filter/logdrop-250 -j DROP + inet/filter/limit-737 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-249 + inet6/filter/limit-737 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-249 + inet/filter/logdrop-249 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-249 -m limit --limit 1/second -j LOG + inet/filter/logdrop-249 -j DROP + inet6/filter/logdrop-249 -j DROP inet/filter/limit-737 -m limit --limit 1/second -j LOG inet6/filter/limit-737 -m limit --limit 1/second -j LOG -Filter 1033 {"flow-limit":{"name":"A","update":false},"log":"none"} +Filter 739 {"flow-limit":{"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-738 inet6/filter/FORWARD -j limit-738 @@ -10833,12 +8574,12 @@ Filter 1033 {"flow-limit":{"name":"A","update":false},"lo inet6/filter/INPUT -j limit-738 inet/filter/OUTPUT -j limit-738 inet6/filter/OUTPUT -j limit-738 - inet/filter/limit-738 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 - inet6/filter/limit-738 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-251 - inet/filter/logdrop-251 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-251 -m limit --limit 1/second -j LOG - inet/filter/logdrop-251 -j DROP - inet6/filter/logdrop-251 -j DROP + inet/filter/limit-738 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 + inet6/filter/limit-738 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-250 + inet/filter/logdrop-250 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-250 -m limit --limit 1/second -j LOG + inet/filter/logdrop-250 -j DROP + inet6/filter/logdrop-250 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -10846,7 +8587,7 @@ Filter 1033 {"flow-limit":{"name":"A","update":false},"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1034 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"none"} +Filter 740 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-739 inet6/filter/FORWARD -j limit-739 @@ -10854,14 +8595,14 @@ Filter 1034 {"action":"pass","flow-limit":{"name":"A","up inet6/filter/INPUT -j limit-739 inet/filter/OUTPUT -j limit-739 inet6/filter/OUTPUT -j limit-739 - inet/filter/limit-739 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-252 - inet6/filter/limit-739 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-252 - inet/filter/logdrop-252 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-252 -m limit --limit 1/second -j LOG - inet/filter/logdrop-252 -j DROP - inet6/filter/logdrop-252 -j DROP + inet/filter/limit-739 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 + inet6/filter/limit-739 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-251 + inet/filter/logdrop-251 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-251 -m limit --limit 1/second -j LOG + inet/filter/logdrop-251 -j DROP + inet6/filter/logdrop-251 -j DROP -Filter 1035 {"flow-limit":{"addr":"dest","name":"A"}} +Filter 741 {"flow-limit":{"addr":"dest","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-740 inet6/filter/FORWARD -j limit-740 @@ -10869,12 +8610,12 @@ Filter 1035 {"flow-limit":{"addr":"dest","name":"A"}} inet6/filter/INPUT -j limit-740 inet/filter/OUTPUT -j limit-740 inet6/filter/OUTPUT -j limit-740 - inet/filter/limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-253 - inet6/filter/limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-253 - inet/filter/logdrop-253 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-253 -m limit --limit 1/second -j LOG - inet/filter/logdrop-253 -j DROP - inet6/filter/logdrop-253 -j DROP + inet/filter/limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-252 + inet6/filter/limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-252 + inet/filter/logdrop-252 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-252 -m limit --limit 1/second -j LOG + inet/filter/logdrop-252 -j DROP + inet6/filter/logdrop-252 -j DROP inet/filter/limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT @@ -10884,7 +8625,7 @@ Filter 1035 {"flow-limit":{"addr":"dest","name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1036 {"action":"pass","flow-limit":{"addr":"dest","name":"A"}} +Filter 742 {"action":"pass","flow-limit":{"addr":"dest","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-741 inet6/filter/FORWARD -j limit-741 @@ -10892,16 +8633,16 @@ Filter 1036 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-741 inet/filter/OUTPUT -j limit-741 inet6/filter/OUTPUT -j limit-741 - inet/filter/limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-254 - inet6/filter/limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-254 - inet/filter/logdrop-254 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-254 -m limit --limit 1/second -j LOG - inet/filter/logdrop-254 -j DROP - inet6/filter/logdrop-254 -j DROP + inet/filter/limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-253 + inet6/filter/limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-253 + inet/filter/logdrop-253 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-253 -m limit --limit 1/second -j LOG + inet/filter/logdrop-253 -j DROP + inet6/filter/logdrop-253 -j DROP inet/filter/limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1037 {"flow-limit":{"addr":"dest","name":"A"},"log":true} +Filter 743 {"flow-limit":{"addr":"dest","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-742 inet6/filter/FORWARD -j limit-742 @@ -10909,12 +8650,12 @@ Filter 1037 {"flow-limit":{"addr":"dest","name":"A"},"log inet6/filter/INPUT -j limit-742 inet/filter/OUTPUT -j limit-742 inet6/filter/OUTPUT -j limit-742 - inet/filter/limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-255 - inet6/filter/limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-255 - inet/filter/logdrop-255 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-255 -m limit --limit 1/second -j LOG - inet/filter/logdrop-255 -j DROP - inet6/filter/logdrop-255 -j DROP + inet/filter/limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-254 + inet6/filter/limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-254 + inet/filter/logdrop-254 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-254 -m limit --limit 1/second -j LOG + inet/filter/logdrop-254 -j DROP + inet6/filter/logdrop-254 -j DROP inet/filter/limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-4 @@ -10928,7 +8669,7 @@ Filter 1037 {"flow-limit":{"addr":"dest","name":"A"},"log inet/filter/logaccept-final-4 -j ACCEPT inet6/filter/logaccept-final-4 -j ACCEPT -Filter 1038 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":true} +Filter 744 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-743 inet6/filter/FORWARD -j limit-743 @@ -10936,16 +8677,16 @@ Filter 1038 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-743 inet/filter/OUTPUT -j limit-743 inet6/filter/OUTPUT -j limit-743 - inet/filter/limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-256 - inet6/filter/limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-256 - inet/filter/logdrop-256 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-256 -m limit --limit 1/second -j LOG - inet/filter/logdrop-256 -j DROP - inet6/filter/logdrop-256 -j DROP + inet/filter/limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-255 + inet6/filter/limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-255 + inet/filter/logdrop-255 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-255 -m limit --limit 1/second -j LOG + inet/filter/logdrop-255 -j DROP + inet6/filter/logdrop-255 -j DROP inet/filter/limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1039 {"flow-limit":{"addr":"dest","name":"A"},"log":"none"} +Filter 745 {"flow-limit":{"addr":"dest","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-744 inet6/filter/FORWARD -j limit-744 @@ -10953,12 +8694,12 @@ Filter 1039 {"flow-limit":{"addr":"dest","name":"A"},"log inet6/filter/INPUT -j limit-744 inet/filter/OUTPUT -j limit-744 inet6/filter/OUTPUT -j limit-744 - inet/filter/limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-257 - inet6/filter/limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-257 - inet/filter/logdrop-257 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-257 -m limit --limit 1/second -j LOG - inet/filter/logdrop-257 -j DROP - inet6/filter/logdrop-257 -j DROP + inet/filter/limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-256 + inet6/filter/limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-256 + inet/filter/logdrop-256 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-256 -m limit --limit 1/second -j LOG + inet/filter/logdrop-256 -j DROP + inet6/filter/logdrop-256 -j DROP inet/filter/limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT @@ -10968,7 +8709,7 @@ Filter 1039 {"flow-limit":{"addr":"dest","name":"A"},"log inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1040 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"none"} +Filter 746 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-745 inet6/filter/FORWARD -j limit-745 @@ -10976,16 +8717,16 @@ Filter 1040 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-745 inet/filter/OUTPUT -j limit-745 inet6/filter/OUTPUT -j limit-745 - inet/filter/limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-258 - inet6/filter/limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-258 - inet/filter/logdrop-258 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-258 -m limit --limit 1/second -j LOG - inet/filter/logdrop-258 -j DROP - inet6/filter/logdrop-258 -j DROP + inet/filter/limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-257 + inet6/filter/limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-257 + inet/filter/logdrop-257 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-257 -m limit --limit 1/second -j LOG + inet/filter/logdrop-257 -j DROP + inet6/filter/logdrop-257 -j DROP inet/filter/limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1041 {"flow-limit":{"addr":"dest","name":"A","update":false}} +Filter 747 {"flow-limit":{"addr":"dest","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-746 inet6/filter/FORWARD -j limit-746 @@ -10993,12 +8734,12 @@ Filter 1041 {"flow-limit":{"addr":"dest","name":"A","upda inet6/filter/INPUT -j limit-746 inet/filter/OUTPUT -j limit-746 inet6/filter/OUTPUT -j limit-746 - inet/filter/limit-746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 - inet6/filter/limit-746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-259 - inet/filter/logdrop-259 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-259 -m limit --limit 1/second -j LOG - inet/filter/logdrop-259 -j DROP - inet6/filter/logdrop-259 -j DROP + inet/filter/limit-746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-258 + inet6/filter/limit-746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-258 + inet/filter/logdrop-258 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-258 -m limit --limit 1/second -j LOG + inet/filter/logdrop-258 -j DROP + inet6/filter/logdrop-258 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -11006,7 +8747,7 @@ Filter 1041 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1042 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false}} +Filter 748 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-747 inet6/filter/FORWARD -j limit-747 @@ -11014,14 +8755,14 @@ Filter 1042 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-747 inet/filter/OUTPUT -j limit-747 inet6/filter/OUTPUT -j limit-747 - inet/filter/limit-747 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 - inet6/filter/limit-747 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 - inet/filter/logdrop-260 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-260 -m limit --limit 1/second -j LOG - inet/filter/logdrop-260 -j DROP - inet6/filter/logdrop-260 -j DROP + inet/filter/limit-747 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 + inet6/filter/limit-747 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-259 + inet/filter/logdrop-259 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-259 -m limit --limit 1/second -j LOG + inet/filter/logdrop-259 -j DROP + inet6/filter/logdrop-259 -j DROP -Filter 1043 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +Filter 749 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-748 inet6/filter/FORWARD -j limit-748 @@ -11029,12 +8770,12 @@ Filter 1043 {"flow-limit":{"addr":"dest","name":"A","upda inet6/filter/INPUT -j limit-748 inet/filter/OUTPUT -j limit-748 inet6/filter/OUTPUT -j limit-748 - inet/filter/limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-261 - inet6/filter/limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-261 - inet/filter/logdrop-261 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-261 -m limit --limit 1/second -j LOG - inet/filter/logdrop-261 -j DROP - inet6/filter/logdrop-261 -j DROP + inet/filter/limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 + inet6/filter/limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 + inet/filter/logdrop-260 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-260 -m limit --limit 1/second -j LOG + inet/filter/logdrop-260 -j DROP + inet6/filter/logdrop-260 -j DROP inet/filter/FORWARD -j logaccept-final-5 inet6/filter/FORWARD -j logaccept-final-5 inet/filter/INPUT -j logaccept-final-5 @@ -11046,7 +8787,7 @@ Filter 1043 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/logaccept-final-5 -j ACCEPT inet6/filter/logaccept-final-5 -j ACCEPT -Filter 1044 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +Filter 750 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-749 inet6/filter/FORWARD -j limit-749 @@ -11054,16 +8795,16 @@ Filter 1044 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-749 inet/filter/OUTPUT -j limit-749 inet6/filter/OUTPUT -j limit-749 - inet/filter/limit-749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-262 - inet6/filter/limit-749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-262 - inet/filter/logdrop-262 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-262 -m limit --limit 1/second -j LOG - inet/filter/logdrop-262 -j DROP - inet6/filter/logdrop-262 -j DROP + inet/filter/limit-749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-261 + inet6/filter/limit-749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-261 + inet/filter/logdrop-261 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-261 -m limit --limit 1/second -j LOG + inet/filter/logdrop-261 -j DROP + inet6/filter/logdrop-261 -j DROP inet/filter/limit-749 -m limit --limit 1/second -j LOG inet6/filter/limit-749 -m limit --limit 1/second -j LOG -Filter 1045 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} +Filter 751 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-750 inet6/filter/FORWARD -j limit-750 @@ -11071,12 +8812,12 @@ Filter 1045 {"flow-limit":{"addr":"dest","name":"A","upda inet6/filter/INPUT -j limit-750 inet/filter/OUTPUT -j limit-750 inet6/filter/OUTPUT -j limit-750 - inet/filter/limit-750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-263 - inet6/filter/limit-750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-263 - inet/filter/logdrop-263 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-263 -m limit --limit 1/second -j LOG - inet/filter/logdrop-263 -j DROP - inet6/filter/logdrop-263 -j DROP + inet/filter/limit-750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-262 + inet6/filter/limit-750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-262 + inet/filter/logdrop-262 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-262 -m limit --limit 1/second -j LOG + inet/filter/logdrop-262 -j DROP + inet6/filter/logdrop-262 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -11084,7 +8825,7 @@ Filter 1045 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1046 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} +Filter 752 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-751 inet6/filter/FORWARD -j limit-751 @@ -11092,14 +8833,14 @@ Filter 1046 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-751 inet/filter/OUTPUT -j limit-751 inet6/filter/OUTPUT -j limit-751 - inet/filter/limit-751 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-264 - inet6/filter/limit-751 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-264 - inet/filter/logdrop-264 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-264 -m limit --limit 1/second -j LOG - inet/filter/logdrop-264 -j DROP - inet6/filter/logdrop-264 -j DROP + inet/filter/limit-751 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-263 + inet6/filter/limit-751 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-263 + inet/filter/logdrop-263 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-263 -m limit --limit 1/second -j LOG + inet/filter/logdrop-263 -j DROP + inet6/filter/logdrop-263 -j DROP -Filter 1047 {"flow-limit":{"name":"C"}} +Filter 753 {"flow-limit":{"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-752 inet6/filter/FORWARD -j limit-752 @@ -11107,12 +8848,12 @@ Filter 1047 {"flow-limit":{"name":"C"}} inet6/filter/INPUT -j limit-752 inet/filter/OUTPUT -j limit-752 inet6/filter/OUTPUT -j limit-752 - inet/filter/limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 - inet6/filter/limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 - inet/filter/logdrop-265 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-265 -m limit --limit 1/second -j LOG - inet/filter/logdrop-265 -j DROP - inet6/filter/logdrop-265 -j DROP + inet/filter/limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-264 + inet6/filter/limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-264 + inet/filter/logdrop-264 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-264 -m limit --limit 1/second -j LOG + inet/filter/logdrop-264 -j DROP + inet6/filter/logdrop-264 -j DROP inet/filter/limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-752 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j ACCEPT @@ -11122,7 +8863,7 @@ Filter 1047 {"flow-limit":{"name":"C"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1048 {"action":"pass","flow-limit":{"name":"C"}} +Filter 754 {"action":"pass","flow-limit":{"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-753 inet6/filter/FORWARD -j limit-753 @@ -11130,16 +8871,16 @@ Filter 1048 {"action":"pass","flow-limit":{"name":"C"}} inet6/filter/INPUT -j limit-753 inet/filter/OUTPUT -j limit-753 inet6/filter/OUTPUT -j limit-753 - inet/filter/limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 - inet6/filter/limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 - inet/filter/logdrop-266 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-266 -m limit --limit 1/second -j LOG - inet/filter/logdrop-266 -j DROP - inet6/filter/logdrop-266 -j DROP + inet/filter/limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 + inet6/filter/limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 + inet/filter/logdrop-265 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-265 -m limit --limit 1/second -j LOG + inet/filter/logdrop-265 -j DROP + inet6/filter/logdrop-265 -j DROP inet/filter/limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-753 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1049 {"flow-limit":{"name":"C"},"log":true} +Filter 755 {"flow-limit":{"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-754 inet6/filter/FORWARD -j limit-754 @@ -11147,12 +8888,12 @@ Filter 1049 {"flow-limit":{"name":"C"},"log":true} inet6/filter/INPUT -j limit-754 inet/filter/OUTPUT -j limit-754 inet6/filter/OUTPUT -j limit-754 - inet/filter/limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 - inet6/filter/limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 - inet/filter/logdrop-267 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-267 -m limit --limit 1/second -j LOG - inet/filter/logdrop-267 -j DROP - inet6/filter/logdrop-267 -j DROP + inet/filter/limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 + inet6/filter/limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 + inet/filter/logdrop-266 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-266 -m limit --limit 1/second -j LOG + inet/filter/logdrop-266 -j DROP + inet6/filter/logdrop-266 -j DROP inet/filter/limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-754 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j logaccept-final-6 @@ -11166,7 +8907,7 @@ Filter 1049 {"flow-limit":{"name":"C"},"log":true} inet/filter/logaccept-final-6 -j ACCEPT inet6/filter/logaccept-final-6 -j ACCEPT -Filter 1050 {"action":"pass","flow-limit":{"name":"C"},"log":true} +Filter 756 {"action":"pass","flow-limit":{"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-755 inet6/filter/FORWARD -j limit-755 @@ -11174,16 +8915,16 @@ Filter 1050 {"action":"pass","flow-limit":{"name":"C"},"l inet6/filter/INPUT -j limit-755 inet/filter/OUTPUT -j limit-755 inet6/filter/OUTPUT -j limit-755 - inet/filter/limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 - inet6/filter/limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 - inet/filter/logdrop-268 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-268 -m limit --limit 1/second -j LOG - inet/filter/logdrop-268 -j DROP - inet6/filter/logdrop-268 -j DROP + inet/filter/limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 + inet6/filter/limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 + inet/filter/logdrop-267 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-267 -m limit --limit 1/second -j LOG + inet/filter/logdrop-267 -j DROP + inet6/filter/logdrop-267 -j DROP inet/filter/limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-755 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 1051 {"flow-limit":{"name":"C"},"log":"none"} +Filter 757 {"flow-limit":{"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-756 inet6/filter/FORWARD -j limit-756 @@ -11191,12 +8932,12 @@ Filter 1051 {"flow-limit":{"name":"C"},"log":"none"} inet6/filter/INPUT -j limit-756 inet/filter/OUTPUT -j limit-756 inet6/filter/OUTPUT -j limit-756 - inet/filter/limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 - inet6/filter/limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 - inet/filter/logdrop-269 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-269 -m limit --limit 1/second -j LOG - inet/filter/logdrop-269 -j DROP - inet6/filter/logdrop-269 -j DROP + inet/filter/limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 + inet6/filter/limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 + inet/filter/logdrop-268 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-268 -m limit --limit 1/second -j LOG + inet/filter/logdrop-268 -j DROP + inet6/filter/logdrop-268 -j DROP inet/filter/limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-756 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j ACCEPT @@ -11206,7 +8947,7 @@ Filter 1051 {"flow-limit":{"name":"C"},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1052 {"action":"pass","flow-limit":{"name":"C"},"log":"none"} +Filter 758 {"action":"pass","flow-limit":{"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-757 inet6/filter/FORWARD -j limit-757 @@ -11214,16 +8955,16 @@ Filter 1052 {"action":"pass","flow-limit":{"name":"C"},"l inet6/filter/INPUT -j limit-757 inet/filter/OUTPUT -j limit-757 inet6/filter/OUTPUT -j limit-757 - inet/filter/limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-270 - inet6/filter/limit-757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-270 - inet/filter/logdrop-270 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-270 -m limit --limit 1/second -j LOG - inet/filter/logdrop-270 -j DROP - inet6/filter/logdrop-270 -j DROP + inet/filter/limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 + inet6/filter/limit-757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 + inet/filter/logdrop-269 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-269 -m limit --limit 1/second -j LOG + inet/filter/logdrop-269 -j DROP + inet6/filter/logdrop-269 -j DROP inet/filter/limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-757 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1053 {"flow-limit":{"name":"C","update":false}} +Filter 759 {"flow-limit":{"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-758 inet6/filter/FORWARD -j limit-758 @@ -11231,12 +8972,12 @@ Filter 1053 {"flow-limit":{"name":"C","update":false}} inet6/filter/INPUT -j limit-758 inet/filter/OUTPUT -j limit-758 inet6/filter/OUTPUT -j limit-758 - inet/filter/limit-758 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 - inet6/filter/limit-758 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 - inet/filter/logdrop-271 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-271 -m limit --limit 1/second -j LOG - inet/filter/logdrop-271 -j DROP - inet6/filter/logdrop-271 -j DROP + inet/filter/limit-758 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-270 + inet6/filter/limit-758 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-270 + inet/filter/logdrop-270 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-270 -m limit --limit 1/second -j LOG + inet/filter/logdrop-270 -j DROP + inet6/filter/logdrop-270 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -11244,7 +8985,7 @@ Filter 1053 {"flow-limit":{"name":"C","update":false}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1054 {"action":"pass","flow-limit":{"name":"C","update":false}} +Filter 760 {"action":"pass","flow-limit":{"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-759 inet6/filter/FORWARD -j limit-759 @@ -11252,14 +8993,14 @@ Filter 1054 {"action":"pass","flow-limit":{"name":"C","up inet6/filter/INPUT -j limit-759 inet/filter/OUTPUT -j limit-759 inet6/filter/OUTPUT -j limit-759 - inet/filter/limit-759 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 - inet6/filter/limit-759 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 - inet/filter/logdrop-272 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-272 -m limit --limit 1/second -j LOG - inet/filter/logdrop-272 -j DROP - inet6/filter/logdrop-272 -j DROP + inet/filter/limit-759 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 + inet6/filter/limit-759 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 + inet/filter/logdrop-271 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-271 -m limit --limit 1/second -j LOG + inet/filter/logdrop-271 -j DROP + inet6/filter/logdrop-271 -j DROP -Filter 1055 {"flow-limit":{"name":"C","update":false},"log":true} +Filter 761 {"flow-limit":{"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-760 inet6/filter/FORWARD -j limit-760 @@ -11267,12 +9008,12 @@ Filter 1055 {"flow-limit":{"name":"C","update":false},"lo inet6/filter/INPUT -j limit-760 inet/filter/OUTPUT -j limit-760 inet6/filter/OUTPUT -j limit-760 - inet/filter/limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 - inet6/filter/limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 - inet/filter/logdrop-273 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-273 -m limit --limit 1/second -j LOG - inet/filter/logdrop-273 -j DROP - inet6/filter/logdrop-273 -j DROP + inet/filter/limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 + inet6/filter/limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 + inet/filter/logdrop-272 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-272 -m limit --limit 1/second -j LOG + inet/filter/logdrop-272 -j DROP + inet6/filter/logdrop-272 -j DROP inet/filter/FORWARD -j logaccept-final-7 inet6/filter/FORWARD -j logaccept-final-7 inet/filter/INPUT -j logaccept-final-7 @@ -11284,7 +9025,7 @@ Filter 1055 {"flow-limit":{"name":"C","update":false},"lo inet/filter/logaccept-final-7 -j ACCEPT inet6/filter/logaccept-final-7 -j ACCEPT -Filter 1056 {"action":"pass","flow-limit":{"name":"C","update":false},"log":true} +Filter 762 {"action":"pass","flow-limit":{"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-761 inet6/filter/FORWARD -j limit-761 @@ -11292,16 +9033,16 @@ Filter 1056 {"action":"pass","flow-limit":{"name":"C","up inet6/filter/INPUT -j limit-761 inet/filter/OUTPUT -j limit-761 inet6/filter/OUTPUT -j limit-761 - inet/filter/limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 - inet6/filter/limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 - inet/filter/logdrop-274 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-274 -m limit --limit 1/second -j LOG - inet/filter/logdrop-274 -j DROP - inet6/filter/logdrop-274 -j DROP + inet/filter/limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 + inet6/filter/limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 + inet/filter/logdrop-273 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-273 -m limit --limit 1/second -j LOG + inet/filter/logdrop-273 -j DROP + inet6/filter/logdrop-273 -j DROP inet/filter/limit-761 -m limit --limit 1/second -j LOG inet6/filter/limit-761 -m limit --limit 1/second -j LOG -Filter 1057 {"flow-limit":{"name":"C","update":false},"log":"none"} +Filter 763 {"flow-limit":{"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-762 inet6/filter/FORWARD -j limit-762 @@ -11309,12 +9050,12 @@ Filter 1057 {"flow-limit":{"name":"C","update":false},"lo inet6/filter/INPUT -j limit-762 inet/filter/OUTPUT -j limit-762 inet6/filter/OUTPUT -j limit-762 - inet/filter/limit-762 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 - inet6/filter/limit-762 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 - inet/filter/logdrop-275 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-275 -m limit --limit 1/second -j LOG - inet/filter/logdrop-275 -j DROP - inet6/filter/logdrop-275 -j DROP + inet/filter/limit-762 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 + inet6/filter/limit-762 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 + inet/filter/logdrop-274 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-274 -m limit --limit 1/second -j LOG + inet/filter/logdrop-274 -j DROP + inet6/filter/logdrop-274 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -11322,7 +9063,7 @@ Filter 1057 {"flow-limit":{"name":"C","update":false},"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1058 {"action":"pass","flow-limit":{"name":"C","update":false},"log":"none"} +Filter 764 {"action":"pass","flow-limit":{"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-763 inet6/filter/FORWARD -j limit-763 @@ -11330,14 +9071,14 @@ Filter 1058 {"action":"pass","flow-limit":{"name":"C","up inet6/filter/INPUT -j limit-763 inet/filter/OUTPUT -j limit-763 inet6/filter/OUTPUT -j limit-763 - inet/filter/limit-763 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-276 - inet6/filter/limit-763 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-276 - inet/filter/logdrop-276 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-276 -m limit --limit 1/second -j LOG - inet/filter/logdrop-276 -j DROP - inet6/filter/logdrop-276 -j DROP + inet/filter/limit-763 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 + inet6/filter/limit-763 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 + inet/filter/logdrop-275 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-275 -m limit --limit 1/second -j LOG + inet/filter/logdrop-275 -j DROP + inet6/filter/logdrop-275 -j DROP -Filter 1059 {"flow-limit":{"addr":"dest","name":"C"}} +Filter 765 {"flow-limit":{"addr":"dest","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-764 inet6/filter/FORWARD -j limit-764 @@ -11345,12 +9086,12 @@ Filter 1059 {"flow-limit":{"addr":"dest","name":"C"}} inet6/filter/INPUT -j limit-764 inet/filter/OUTPUT -j limit-764 inet6/filter/OUTPUT -j limit-764 - inet/filter/limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-277 - inet6/filter/limit-764 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-277 - inet/filter/logdrop-277 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-277 -m limit --limit 1/second -j LOG - inet/filter/logdrop-277 -j DROP - inet6/filter/logdrop-277 -j DROP + inet/filter/limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-276 + inet6/filter/limit-764 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-276 + inet/filter/logdrop-276 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-276 -m limit --limit 1/second -j LOG + inet/filter/logdrop-276 -j DROP + inet6/filter/logdrop-276 -j DROP inet/filter/limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-764 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j ACCEPT @@ -11360,7 +9101,7 @@ Filter 1059 {"flow-limit":{"addr":"dest","name":"C"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1060 {"action":"pass","flow-limit":{"addr":"dest","name":"C"}} +Filter 766 {"action":"pass","flow-limit":{"addr":"dest","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-765 inet6/filter/FORWARD -j limit-765 @@ -11368,16 +9109,16 @@ Filter 1060 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-765 inet/filter/OUTPUT -j limit-765 inet6/filter/OUTPUT -j limit-765 - inet/filter/limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-278 - inet6/filter/limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-278 - inet/filter/logdrop-278 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-278 -m limit --limit 1/second -j LOG - inet/filter/logdrop-278 -j DROP - inet6/filter/logdrop-278 -j DROP + inet/filter/limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-277 + inet6/filter/limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-277 + inet/filter/logdrop-277 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-277 -m limit --limit 1/second -j LOG + inet/filter/logdrop-277 -j DROP + inet6/filter/logdrop-277 -j DROP inet/filter/limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-765 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1061 {"flow-limit":{"addr":"dest","name":"C"},"log":true} +Filter 767 {"flow-limit":{"addr":"dest","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-766 inet6/filter/FORWARD -j limit-766 @@ -11385,12 +9126,12 @@ Filter 1061 {"flow-limit":{"addr":"dest","name":"C"},"log inet6/filter/INPUT -j limit-766 inet/filter/OUTPUT -j limit-766 inet6/filter/OUTPUT -j limit-766 - inet/filter/limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-279 - inet6/filter/limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-279 - inet/filter/logdrop-279 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-279 -m limit --limit 1/second -j LOG - inet/filter/logdrop-279 -j DROP - inet6/filter/logdrop-279 -j DROP + inet/filter/limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-278 + inet6/filter/limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-278 + inet/filter/logdrop-278 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-278 -m limit --limit 1/second -j LOG + inet/filter/logdrop-278 -j DROP + inet6/filter/logdrop-278 -j DROP inet/filter/limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-766 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j logaccept-final-8 @@ -11404,7 +9145,7 @@ Filter 1061 {"flow-limit":{"addr":"dest","name":"C"},"log inet/filter/logaccept-final-8 -j ACCEPT inet6/filter/logaccept-final-8 -j ACCEPT -Filter 1062 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":true} +Filter 768 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-767 inet6/filter/FORWARD -j limit-767 @@ -11412,16 +9153,16 @@ Filter 1062 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-767 inet/filter/OUTPUT -j limit-767 inet6/filter/OUTPUT -j limit-767 - inet/filter/limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-280 - inet6/filter/limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-280 - inet/filter/logdrop-280 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-280 -m limit --limit 1/second -j LOG - inet/filter/logdrop-280 -j DROP - inet6/filter/logdrop-280 -j DROP + inet/filter/limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-279 + inet6/filter/limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-279 + inet/filter/logdrop-279 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-279 -m limit --limit 1/second -j LOG + inet/filter/logdrop-279 -j DROP + inet6/filter/logdrop-279 -j DROP inet/filter/limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-767 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 1063 {"flow-limit":{"addr":"dest","name":"C"},"log":"none"} +Filter 769 {"flow-limit":{"addr":"dest","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-768 inet6/filter/FORWARD -j limit-768 @@ -11429,12 +9170,12 @@ Filter 1063 {"flow-limit":{"addr":"dest","name":"C"},"log inet6/filter/INPUT -j limit-768 inet/filter/OUTPUT -j limit-768 inet6/filter/OUTPUT -j limit-768 - inet/filter/limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-281 - inet6/filter/limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-281 - inet/filter/logdrop-281 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-281 -m limit --limit 1/second -j LOG - inet/filter/logdrop-281 -j DROP - inet6/filter/logdrop-281 -j DROP + inet/filter/limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-280 + inet6/filter/limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-280 + inet/filter/logdrop-280 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-280 -m limit --limit 1/second -j LOG + inet/filter/logdrop-280 -j DROP + inet6/filter/logdrop-280 -j DROP inet/filter/limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-768 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j ACCEPT @@ -11444,7 +9185,7 @@ Filter 1063 {"flow-limit":{"addr":"dest","name":"C"},"log inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1064 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":"none"} +Filter 770 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-769 inet6/filter/FORWARD -j limit-769 @@ -11452,16 +9193,16 @@ Filter 1064 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-769 inet/filter/OUTPUT -j limit-769 inet6/filter/OUTPUT -j limit-769 - inet/filter/limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-282 - inet6/filter/limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-282 - inet/filter/logdrop-282 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-282 -m limit --limit 1/second -j LOG - inet/filter/logdrop-282 -j DROP - inet6/filter/logdrop-282 -j DROP + inet/filter/limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-281 + inet6/filter/limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-281 + inet/filter/logdrop-281 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-281 -m limit --limit 1/second -j LOG + inet/filter/logdrop-281 -j DROP + inet6/filter/logdrop-281 -j DROP inet/filter/limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-769 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1065 {"flow-limit":{"addr":"dest","name":"C","update":false}} +Filter 771 {"flow-limit":{"addr":"dest","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-770 inet6/filter/FORWARD -j limit-770 @@ -11469,12 +9210,12 @@ Filter 1065 {"flow-limit":{"addr":"dest","name":"C","upda inet6/filter/INPUT -j limit-770 inet/filter/OUTPUT -j limit-770 inet6/filter/OUTPUT -j limit-770 - inet/filter/limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-283 - inet6/filter/limit-770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-283 - inet/filter/logdrop-283 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-283 -m limit --limit 1/second -j LOG - inet/filter/logdrop-283 -j DROP - inet6/filter/logdrop-283 -j DROP + inet/filter/limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-282 + inet6/filter/limit-770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-282 + inet/filter/logdrop-282 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-282 -m limit --limit 1/second -j LOG + inet/filter/logdrop-282 -j DROP + inet6/filter/logdrop-282 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -11482,7 +9223,7 @@ Filter 1065 {"flow-limit":{"addr":"dest","name":"C","upda inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1066 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false}} +Filter 772 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-771 inet6/filter/FORWARD -j limit-771 @@ -11490,14 +9231,14 @@ Filter 1066 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-771 inet/filter/OUTPUT -j limit-771 inet6/filter/OUTPUT -j limit-771 - inet/filter/limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284 - inet6/filter/limit-771 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284 - inet/filter/logdrop-284 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-284 -m limit --limit 1/second -j LOG - inet/filter/logdrop-284 -j DROP - inet6/filter/logdrop-284 -j DROP + inet/filter/limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-283 + inet6/filter/limit-771 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-283 + inet/filter/logdrop-283 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-283 -m limit --limit 1/second -j LOG + inet/filter/logdrop-283 -j DROP + inet6/filter/logdrop-283 -j DROP -Filter 1067 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":true} +Filter 773 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-772 inet6/filter/FORWARD -j limit-772 @@ -11505,12 +9246,12 @@ Filter 1067 {"flow-limit":{"addr":"dest","name":"C","upda inet6/filter/INPUT -j limit-772 inet/filter/OUTPUT -j limit-772 inet6/filter/OUTPUT -j limit-772 - inet/filter/limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-285 - inet6/filter/limit-772 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-285 - inet/filter/logdrop-285 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-285 -m limit --limit 1/second -j LOG - inet/filter/logdrop-285 -j DROP - inet6/filter/logdrop-285 -j DROP + inet/filter/limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284 + inet6/filter/limit-772 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284 + inet/filter/logdrop-284 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-284 -m limit --limit 1/second -j LOG + inet/filter/logdrop-284 -j DROP + inet6/filter/logdrop-284 -j DROP inet/filter/FORWARD -j logaccept-final-9 inet6/filter/FORWARD -j logaccept-final-9 inet/filter/INPUT -j logaccept-final-9 @@ -11522,7 +9263,7 @@ Filter 1067 {"flow-limit":{"addr":"dest","name":"C","upda inet/filter/logaccept-final-9 -j ACCEPT inet6/filter/logaccept-final-9 -j ACCEPT -Filter 1068 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":true} +Filter 774 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-773 inet6/filter/FORWARD -j limit-773 @@ -11530,16 +9271,16 @@ Filter 1068 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-773 inet/filter/OUTPUT -j limit-773 inet6/filter/OUTPUT -j limit-773 - inet/filter/limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-286 - inet6/filter/limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-286 - inet/filter/logdrop-286 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-286 -m limit --limit 1/second -j LOG - inet/filter/logdrop-286 -j DROP - inet6/filter/logdrop-286 -j DROP + inet/filter/limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-285 + inet6/filter/limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-285 + inet/filter/logdrop-285 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-285 -m limit --limit 1/second -j LOG + inet/filter/logdrop-285 -j DROP + inet6/filter/logdrop-285 -j DROP inet/filter/limit-773 -m limit --limit 1/second -j LOG inet6/filter/limit-773 -m limit --limit 1/second -j LOG -Filter 1069 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} +Filter 775 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-774 inet6/filter/FORWARD -j limit-774 @@ -11547,12 +9288,12 @@ Filter 1069 {"flow-limit":{"addr":"dest","name":"C","upda inet6/filter/INPUT -j limit-774 inet/filter/OUTPUT -j limit-774 inet6/filter/OUTPUT -j limit-774 - inet/filter/limit-774 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-287 - inet6/filter/limit-774 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-287 - inet/filter/logdrop-287 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-287 -m limit --limit 1/second -j LOG - inet/filter/logdrop-287 -j DROP - inet6/filter/logdrop-287 -j DROP + inet/filter/limit-774 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-286 + inet6/filter/limit-774 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-286 + inet/filter/logdrop-286 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-286 -m limit --limit 1/second -j LOG + inet/filter/logdrop-286 -j DROP + inet6/filter/logdrop-286 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -11560,7 +9301,7 @@ Filter 1069 {"flow-limit":{"addr":"dest","name":"C","upda inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1070 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} +Filter 776 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-775 inet6/filter/FORWARD -j limit-775 @@ -11568,14 +9309,14 @@ Filter 1070 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-775 inet/filter/OUTPUT -j limit-775 inet6/filter/OUTPUT -j limit-775 - inet/filter/limit-775 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-288 - inet6/filter/limit-775 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-288 - inet/filter/logdrop-288 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-288 -m limit --limit 1/second -j LOG - inet/filter/logdrop-288 -j DROP - inet6/filter/logdrop-288 -j DROP + inet/filter/limit-775 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-287 + inet6/filter/limit-775 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-287 + inet/filter/logdrop-287 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-287 -m limit --limit 1/second -j LOG + inet/filter/logdrop-287 -j DROP + inet6/filter/logdrop-287 -j DROP -Filter 1071 {"flow-limit":{"log":false}} +Filter 777 {"flow-limit":{"log":false}} (filter-limit) inet/filter/FORWARD -j limit-776 inet6/filter/FORWARD -j limit-776 @@ -11594,7 +9335,7 @@ Filter 1071 {"flow-limit":{"log":false}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1072 {"action":"pass","flow-limit":{"log":false}} +Filter 778 {"action":"pass","flow-limit":{"log":false}} (filter-limit) inet/filter/FORWARD -j limit-777 inet6/filter/FORWARD -j limit-777 @@ -11607,7 +9348,7 @@ Filter 1072 {"action":"pass","flow-limit":{"log":false}} inet/filter/limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --set inet6/filter/limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1073 {"flow-limit":{"log":false},"log":true} +Filter 779 {"flow-limit":{"log":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-778 inet6/filter/FORWARD -j limit-778 @@ -11630,7 +9371,7 @@ Filter 1073 {"flow-limit":{"log":false},"log":true} inet/filter/logaccept-final-10 -j ACCEPT inet6/filter/logaccept-final-10 -j ACCEPT -Filter 1074 {"action":"pass","flow-limit":{"log":false},"log":true} +Filter 780 {"action":"pass","flow-limit":{"log":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-779 inet6/filter/FORWARD -j limit-779 @@ -11643,7 +9384,7 @@ Filter 1074 {"action":"pass","flow-limit":{"log":false}," inet/filter/limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1075 {"flow-limit":{"log":false},"log":"none"} +Filter 781 {"flow-limit":{"log":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-780 inet6/filter/FORWARD -j limit-780 @@ -11662,7 +9403,7 @@ Filter 1075 {"flow-limit":{"log":false},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1076 {"action":"pass","flow-limit":{"log":false},"log":"none"} +Filter 782 {"action":"pass","flow-limit":{"log":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-781 inet6/filter/FORWARD -j limit-781 @@ -11675,7 +9416,7 @@ Filter 1076 {"action":"pass","flow-limit":{"log":false}," inet/filter/limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --set inet6/filter/limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1077 {"flow-limit":{"log":false,"name":"A"}} +Filter 783 {"flow-limit":{"log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-782 inet6/filter/FORWARD -j limit-782 @@ -11694,7 +9435,7 @@ Filter 1077 {"flow-limit":{"log":false,"name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1078 {"action":"pass","flow-limit":{"log":false,"name":"A"}} +Filter 784 {"action":"pass","flow-limit":{"log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-783 inet6/filter/FORWARD -j limit-783 @@ -11707,7 +9448,7 @@ Filter 1078 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1079 {"flow-limit":{"log":false,"name":"A"},"log":true} +Filter 785 {"flow-limit":{"log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-784 inet6/filter/FORWARD -j limit-784 @@ -11730,7 +9471,7 @@ Filter 1079 {"flow-limit":{"log":false,"name":"A"},"log": inet/filter/logaccept-final-11 -j ACCEPT inet6/filter/logaccept-final-11 -j ACCEPT -Filter 1080 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":true} +Filter 786 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-785 inet6/filter/FORWARD -j limit-785 @@ -11743,7 +9484,7 @@ Filter 1080 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1081 {"flow-limit":{"log":false,"name":"A"},"log":"none"} +Filter 787 {"flow-limit":{"log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-786 inet6/filter/FORWARD -j limit-786 @@ -11762,7 +9503,7 @@ Filter 1081 {"flow-limit":{"log":false,"name":"A"},"log": inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1082 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"none"} +Filter 788 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-787 inet6/filter/FORWARD -j limit-787 @@ -11775,7 +9516,7 @@ Filter 1082 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1083 {"flow-limit":{"log":false,"name":"A","update":false}} +Filter 789 {"flow-limit":{"log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-788 inet6/filter/FORWARD -j limit-788 @@ -11792,7 +9533,7 @@ Filter 1083 {"flow-limit":{"log":false,"name":"A","update inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1084 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false}} +Filter 790 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-789 inet6/filter/FORWARD -j limit-789 @@ -11803,7 +9544,7 @@ Filter 1084 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-789 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1085 {"flow-limit":{"log":false,"name":"A","update":false},"log":true} +Filter 791 {"flow-limit":{"log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-790 inet6/filter/FORWARD -j limit-790 @@ -11824,7 +9565,7 @@ Filter 1085 {"flow-limit":{"log":false,"name":"A","update inet/filter/logaccept-final-12 -j ACCEPT inet6/filter/logaccept-final-12 -j ACCEPT -Filter 1086 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":true} +Filter 792 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-791 inet6/filter/FORWARD -j limit-791 @@ -11837,7 +9578,7 @@ Filter 1086 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-791 -m limit --limit 1/second -j LOG inet6/filter/limit-791 -m limit --limit 1/second -j LOG -Filter 1087 {"flow-limit":{"log":false,"name":"A","update":false},"log":"none"} +Filter 793 {"flow-limit":{"log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-792 inet6/filter/FORWARD -j limit-792 @@ -11854,7 +9595,7 @@ Filter 1087 {"flow-limit":{"log":false,"name":"A","update inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1088 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"none"} +Filter 794 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-793 inet6/filter/FORWARD -j limit-793 @@ -11865,7 +9606,7 @@ Filter 1088 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-793 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1089 {"flow-limit":{"addr":"dest","log":false,"name":"A"}} +Filter 795 {"flow-limit":{"addr":"dest","log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-794 inet6/filter/FORWARD -j limit-794 @@ -11884,7 +9625,7 @@ Filter 1089 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1090 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"}} +Filter 796 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-795 inet6/filter/FORWARD -j limit-795 @@ -11897,7 +9638,7 @@ Filter 1090 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1091 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} +Filter 797 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-796 inet6/filter/FORWARD -j limit-796 @@ -11920,7 +9661,7 @@ Filter 1091 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/logaccept-final-13 -j ACCEPT inet6/filter/logaccept-final-13 -j ACCEPT -Filter 1092 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} +Filter 798 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-797 inet6/filter/FORWARD -j limit-797 @@ -11933,7 +9674,7 @@ Filter 1092 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1093 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} +Filter 799 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-798 inet6/filter/FORWARD -j limit-798 @@ -11952,7 +9693,7 @@ Filter 1093 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1094 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} +Filter 800 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-799 inet6/filter/FORWARD -j limit-799 @@ -11965,7 +9706,7 @@ Filter 1094 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1095 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} +Filter 801 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-800 inet6/filter/FORWARD -j limit-800 @@ -11982,7 +9723,7 @@ Filter 1095 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1096 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} +Filter 802 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-801 inet6/filter/FORWARD -j limit-801 @@ -11993,7 +9734,7 @@ Filter 1096 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-801 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-801 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1097 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} +Filter 803 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-802 inet6/filter/FORWARD -j limit-802 @@ -12014,7 +9755,7 @@ Filter 1097 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/logaccept-final-14 -j ACCEPT inet6/filter/logaccept-final-14 -j ACCEPT -Filter 1098 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} +Filter 804 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-803 inet6/filter/FORWARD -j limit-803 @@ -12027,7 +9768,7 @@ Filter 1098 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-803 -m limit --limit 1/second -j LOG inet6/filter/limit-803 -m limit --limit 1/second -j LOG -Filter 1099 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} +Filter 805 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-804 inet6/filter/FORWARD -j limit-804 @@ -12044,7 +9785,7 @@ Filter 1099 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1100 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} +Filter 806 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-805 inet6/filter/FORWARD -j limit-805 @@ -12055,7 +9796,7 @@ Filter 1100 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-805 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1101 {"flow-limit":{"log":false,"name":"C"}} +Filter 807 {"flow-limit":{"log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-806 inet6/filter/FORWARD -j limit-806 @@ -12074,7 +9815,7 @@ Filter 1101 {"flow-limit":{"log":false,"name":"C"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1102 {"action":"pass","flow-limit":{"log":false,"name":"C"}} +Filter 808 {"action":"pass","flow-limit":{"log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-807 inet6/filter/FORWARD -j limit-807 @@ -12087,7 +9828,7 @@ Filter 1102 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-807 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1103 {"flow-limit":{"log":false,"name":"C"},"log":true} +Filter 809 {"flow-limit":{"log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-808 inet6/filter/FORWARD -j limit-808 @@ -12110,7 +9851,7 @@ Filter 1103 {"flow-limit":{"log":false,"name":"C"},"log": inet/filter/logaccept-final-15 -j ACCEPT inet6/filter/logaccept-final-15 -j ACCEPT -Filter 1104 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":true} +Filter 810 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-809 inet6/filter/FORWARD -j limit-809 @@ -12123,7 +9864,7 @@ Filter 1104 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-809 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 1105 {"flow-limit":{"log":false,"name":"C"},"log":"none"} +Filter 811 {"flow-limit":{"log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-810 inet6/filter/FORWARD -j limit-810 @@ -12142,7 +9883,7 @@ Filter 1105 {"flow-limit":{"log":false,"name":"C"},"log": inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1106 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":"none"} +Filter 812 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-811 inet6/filter/FORWARD -j limit-811 @@ -12155,7 +9896,7 @@ Filter 1106 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-811 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1107 {"flow-limit":{"log":false,"name":"C","update":false}} +Filter 813 {"flow-limit":{"log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-812 inet6/filter/FORWARD -j limit-812 @@ -12172,7 +9913,7 @@ Filter 1107 {"flow-limit":{"log":false,"name":"C","update inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1108 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false}} +Filter 814 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-813 inet6/filter/FORWARD -j limit-813 @@ -12183,7 +9924,7 @@ Filter 1108 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-813 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-813 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1109 {"flow-limit":{"log":false,"name":"C","update":false},"log":true} +Filter 815 {"flow-limit":{"log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-814 inet6/filter/FORWARD -j limit-814 @@ -12204,7 +9945,7 @@ Filter 1109 {"flow-limit":{"log":false,"name":"C","update inet/filter/logaccept-final-16 -j ACCEPT inet6/filter/logaccept-final-16 -j ACCEPT -Filter 1110 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":true} +Filter 816 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-815 inet6/filter/FORWARD -j limit-815 @@ -12217,7 +9958,7 @@ Filter 1110 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-815 -m limit --limit 1/second -j LOG inet6/filter/limit-815 -m limit --limit 1/second -j LOG -Filter 1111 {"flow-limit":{"log":false,"name":"C","update":false},"log":"none"} +Filter 817 {"flow-limit":{"log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-816 inet6/filter/FORWARD -j limit-816 @@ -12234,7 +9975,7 @@ Filter 1111 {"flow-limit":{"log":false,"name":"C","update inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1112 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":"none"} +Filter 818 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-817 inet6/filter/FORWARD -j limit-817 @@ -12245,7 +9986,7 @@ Filter 1112 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-817 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-817 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1113 {"flow-limit":{"addr":"dest","log":false,"name":"C"}} +Filter 819 {"flow-limit":{"addr":"dest","log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-818 inet6/filter/FORWARD -j limit-818 @@ -12264,7 +10005,7 @@ Filter 1113 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1114 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"}} +Filter 820 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-819 inet6/filter/FORWARD -j limit-819 @@ -12277,7 +10018,7 @@ Filter 1114 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-819 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1115 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} +Filter 821 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-820 inet6/filter/FORWARD -j limit-820 @@ -12300,7 +10041,7 @@ Filter 1115 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/logaccept-final-17 -j ACCEPT inet6/filter/logaccept-final-17 -j ACCEPT -Filter 1116 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} +Filter 822 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-821 inet6/filter/FORWARD -j limit-821 @@ -12313,7 +10054,7 @@ Filter 1116 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-821 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 1117 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} +Filter 823 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-822 inet6/filter/FORWARD -j limit-822 @@ -12332,7 +10073,7 @@ Filter 1117 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1118 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} +Filter 824 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-823 inet6/filter/FORWARD -j limit-823 @@ -12345,7 +10086,7 @@ Filter 1118 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-823 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1119 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} +Filter 825 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-824 inet6/filter/FORWARD -j limit-824 @@ -12362,7 +10103,7 @@ Filter 1119 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1120 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} +Filter 826 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-825 inet6/filter/FORWARD -j limit-825 @@ -12373,7 +10114,7 @@ Filter 1120 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-825 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-825 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1121 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} +Filter 827 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-826 inet6/filter/FORWARD -j limit-826 @@ -12394,7 +10135,7 @@ Filter 1121 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/logaccept-final-18 -j ACCEPT inet6/filter/logaccept-final-18 -j ACCEPT -Filter 1122 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} +Filter 828 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-827 inet6/filter/FORWARD -j limit-827 @@ -12407,7 +10148,7 @@ Filter 1122 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-827 -m limit --limit 1/second -j LOG inet6/filter/limit-827 -m limit --limit 1/second -j LOG -Filter 1123 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} +Filter 829 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-828 inet6/filter/FORWARD -j limit-828 @@ -12424,7 +10165,7 @@ Filter 1123 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1124 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} +Filter 830 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-829 inet6/filter/FORWARD -j limit-829 @@ -12435,7 +10176,7 @@ Filter 1124 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-829 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-829 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1125 {"flow-limit":{"log":"none"}} +Filter 831 {"flow-limit":{"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-830 inet6/filter/FORWARD -j limit-830 @@ -12454,7 +10195,7 @@ Filter 1125 {"flow-limit":{"log":"none"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1126 {"action":"pass","flow-limit":{"log":"none"}} +Filter 832 {"action":"pass","flow-limit":{"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-831 inet6/filter/FORWARD -j limit-831 @@ -12467,7 +10208,7 @@ Filter 1126 {"action":"pass","flow-limit":{"log":"none"}} inet/filter/limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --set inet6/filter/limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1127 {"flow-limit":{"log":"none"},"log":true} +Filter 833 {"flow-limit":{"log":"none"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-832 inet6/filter/FORWARD -j limit-832 @@ -12490,7 +10231,7 @@ Filter 1127 {"flow-limit":{"log":"none"},"log":true} inet/filter/logaccept-final-19 -j ACCEPT inet6/filter/logaccept-final-19 -j ACCEPT -Filter 1128 {"action":"pass","flow-limit":{"log":"none"},"log":true} +Filter 834 {"action":"pass","flow-limit":{"log":"none"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-833 inet6/filter/FORWARD -j limit-833 @@ -12503,7 +10244,7 @@ Filter 1128 {"action":"pass","flow-limit":{"log":"none"}, inet/filter/limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1129 {"flow-limit":{"log":"none"},"log":"none"} +Filter 835 {"flow-limit":{"log":"none"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-834 inet6/filter/FORWARD -j limit-834 @@ -12522,7 +10263,7 @@ Filter 1129 {"flow-limit":{"log":"none"},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1130 {"action":"pass","flow-limit":{"log":"none"},"log":"none"} +Filter 836 {"action":"pass","flow-limit":{"log":"none"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-835 inet6/filter/FORWARD -j limit-835 @@ -12535,7 +10276,7 @@ Filter 1130 {"action":"pass","flow-limit":{"log":"none"}, inet/filter/limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --set inet6/filter/limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1131 {"flow-limit":{"log":"none","name":"A"}} +Filter 837 {"flow-limit":{"log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-836 inet6/filter/FORWARD -j limit-836 @@ -12554,7 +10295,7 @@ Filter 1131 {"flow-limit":{"log":"none","name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1132 {"action":"pass","flow-limit":{"log":"none","name":"A"}} +Filter 838 {"action":"pass","flow-limit":{"log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-837 inet6/filter/FORWARD -j limit-837 @@ -12567,7 +10308,7 @@ Filter 1132 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1133 {"flow-limit":{"log":"none","name":"A"},"log":true} +Filter 839 {"flow-limit":{"log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-838 inet6/filter/FORWARD -j limit-838 @@ -12590,7 +10331,7 @@ Filter 1133 {"flow-limit":{"log":"none","name":"A"},"log" inet/filter/logaccept-final-20 -j ACCEPT inet6/filter/logaccept-final-20 -j ACCEPT -Filter 1134 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":true} +Filter 840 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-839 inet6/filter/FORWARD -j limit-839 @@ -12603,7 +10344,7 @@ Filter 1134 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1135 {"flow-limit":{"log":"none","name":"A"},"log":"none"} +Filter 841 {"flow-limit":{"log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-840 inet6/filter/FORWARD -j limit-840 @@ -12622,7 +10363,7 @@ Filter 1135 {"flow-limit":{"log":"none","name":"A"},"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1136 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"none"} +Filter 842 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-841 inet6/filter/FORWARD -j limit-841 @@ -12635,7 +10376,7 @@ Filter 1136 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1137 {"flow-limit":{"log":"none","name":"A","update":false}} +Filter 843 {"flow-limit":{"log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-842 inet6/filter/FORWARD -j limit-842 @@ -12652,7 +10393,7 @@ Filter 1137 {"flow-limit":{"log":"none","name":"A","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1138 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false}} +Filter 844 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-843 inet6/filter/FORWARD -j limit-843 @@ -12663,7 +10404,7 @@ Filter 1138 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-843 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-843 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1139 {"flow-limit":{"log":"none","name":"A","update":false},"log":true} +Filter 845 {"flow-limit":{"log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-844 inet6/filter/FORWARD -j limit-844 @@ -12684,7 +10425,7 @@ Filter 1139 {"flow-limit":{"log":"none","name":"A","updat inet/filter/logaccept-final-21 -j ACCEPT inet6/filter/logaccept-final-21 -j ACCEPT -Filter 1140 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":true} +Filter 846 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-845 inet6/filter/FORWARD -j limit-845 @@ -12697,7 +10438,7 @@ Filter 1140 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-845 -m limit --limit 1/second -j LOG inet6/filter/limit-845 -m limit --limit 1/second -j LOG -Filter 1141 {"flow-limit":{"log":"none","name":"A","update":false},"log":"none"} +Filter 847 {"flow-limit":{"log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-846 inet6/filter/FORWARD -j limit-846 @@ -12714,7 +10455,7 @@ Filter 1141 {"flow-limit":{"log":"none","name":"A","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1142 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"none"} +Filter 848 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-847 inet6/filter/FORWARD -j limit-847 @@ -12725,7 +10466,7 @@ Filter 1142 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-847 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-847 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1143 {"flow-limit":{"addr":"dest","log":"none","name":"A"}} +Filter 849 {"flow-limit":{"addr":"dest","log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-848 inet6/filter/FORWARD -j limit-848 @@ -12744,7 +10485,7 @@ Filter 1143 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1144 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"}} +Filter 850 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-849 inet6/filter/FORWARD -j limit-849 @@ -12757,7 +10498,7 @@ Filter 1144 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1145 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} +Filter 851 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-850 inet6/filter/FORWARD -j limit-850 @@ -12780,7 +10521,7 @@ Filter 1145 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/logaccept-final-22 -j ACCEPT inet6/filter/logaccept-final-22 -j ACCEPT -Filter 1146 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} +Filter 852 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-851 inet6/filter/FORWARD -j limit-851 @@ -12793,7 +10534,7 @@ Filter 1146 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1147 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} +Filter 853 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-852 inet6/filter/FORWARD -j limit-852 @@ -12812,7 +10553,7 @@ Filter 1147 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1148 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} +Filter 854 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-853 inet6/filter/FORWARD -j limit-853 @@ -12825,7 +10566,7 @@ Filter 1148 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1149 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} +Filter 855 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-854 inet6/filter/FORWARD -j limit-854 @@ -12842,7 +10583,7 @@ Filter 1149 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1150 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} +Filter 856 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-855 inet6/filter/FORWARD -j limit-855 @@ -12853,7 +10594,7 @@ Filter 1150 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1151 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} +Filter 857 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-856 inet6/filter/FORWARD -j limit-856 @@ -12874,7 +10615,7 @@ Filter 1151 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/logaccept-final-23 -j ACCEPT inet6/filter/logaccept-final-23 -j ACCEPT -Filter 1152 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} +Filter 858 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-857 inet6/filter/FORWARD -j limit-857 @@ -12887,7 +10628,7 @@ Filter 1152 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-857 -m limit --limit 1/second -j LOG inet6/filter/limit-857 -m limit --limit 1/second -j LOG -Filter 1153 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} +Filter 859 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-858 inet6/filter/FORWARD -j limit-858 @@ -12904,7 +10645,7 @@ Filter 1153 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1154 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} +Filter 860 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-859 inet6/filter/FORWARD -j limit-859 @@ -12915,7 +10656,7 @@ Filter 1154 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-859 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-859 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1155 {"flow-limit":{"log":"none","name":"C"}} +Filter 861 {"flow-limit":{"log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-860 inet6/filter/FORWARD -j limit-860 @@ -12934,7 +10675,7 @@ Filter 1155 {"flow-limit":{"log":"none","name":"C"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1156 {"action":"pass","flow-limit":{"log":"none","name":"C"}} +Filter 862 {"action":"pass","flow-limit":{"log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-861 inet6/filter/FORWARD -j limit-861 @@ -12947,7 +10688,7 @@ Filter 1156 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-861 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1157 {"flow-limit":{"log":"none","name":"C"},"log":true} +Filter 863 {"flow-limit":{"log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-862 inet6/filter/FORWARD -j limit-862 @@ -12970,7 +10711,7 @@ Filter 1157 {"flow-limit":{"log":"none","name":"C"},"log" inet/filter/logaccept-final-24 -j ACCEPT inet6/filter/logaccept-final-24 -j ACCEPT -Filter 1158 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":true} +Filter 864 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-863 inet6/filter/FORWARD -j limit-863 @@ -12983,7 +10724,7 @@ Filter 1158 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-863 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 1159 {"flow-limit":{"log":"none","name":"C"},"log":"none"} +Filter 865 {"flow-limit":{"log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-864 inet6/filter/FORWARD -j limit-864 @@ -13002,7 +10743,7 @@ Filter 1159 {"flow-limit":{"log":"none","name":"C"},"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1160 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":"none"} +Filter 866 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-865 inet6/filter/FORWARD -j limit-865 @@ -13015,7 +10756,7 @@ Filter 1160 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-865 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1161 {"flow-limit":{"log":"none","name":"C","update":false}} +Filter 867 {"flow-limit":{"log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-866 inet6/filter/FORWARD -j limit-866 @@ -13032,7 +10773,7 @@ Filter 1161 {"flow-limit":{"log":"none","name":"C","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1162 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false}} +Filter 868 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-867 inet6/filter/FORWARD -j limit-867 @@ -13043,7 +10784,7 @@ Filter 1162 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-867 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-867 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1163 {"flow-limit":{"log":"none","name":"C","update":false},"log":true} +Filter 869 {"flow-limit":{"log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-868 inet6/filter/FORWARD -j limit-868 @@ -13064,7 +10805,7 @@ Filter 1163 {"flow-limit":{"log":"none","name":"C","updat inet/filter/logaccept-final-25 -j ACCEPT inet6/filter/logaccept-final-25 -j ACCEPT -Filter 1164 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":true} +Filter 870 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-869 inet6/filter/FORWARD -j limit-869 @@ -13077,7 +10818,7 @@ Filter 1164 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-869 -m limit --limit 1/second -j LOG inet6/filter/limit-869 -m limit --limit 1/second -j LOG -Filter 1165 {"flow-limit":{"log":"none","name":"C","update":false},"log":"none"} +Filter 871 {"flow-limit":{"log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-870 inet6/filter/FORWARD -j limit-870 @@ -13094,7 +10835,7 @@ Filter 1165 {"flow-limit":{"log":"none","name":"C","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1166 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":"none"} +Filter 872 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-871 inet6/filter/FORWARD -j limit-871 @@ -13105,7 +10846,7 @@ Filter 1166 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-871 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-871 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1167 {"flow-limit":{"addr":"dest","log":"none","name":"C"}} +Filter 873 {"flow-limit":{"addr":"dest","log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-872 inet6/filter/FORWARD -j limit-872 @@ -13124,7 +10865,7 @@ Filter 1167 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1168 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"}} +Filter 874 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-873 inet6/filter/FORWARD -j limit-873 @@ -13137,7 +10878,7 @@ Filter 1168 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-873 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1169 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} +Filter 875 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-874 inet6/filter/FORWARD -j limit-874 @@ -13160,7 +10901,7 @@ Filter 1169 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/logaccept-final-26 -j ACCEPT inet6/filter/logaccept-final-26 -j ACCEPT -Filter 1170 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} +Filter 876 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-875 inet6/filter/FORWARD -j limit-875 @@ -13173,7 +10914,7 @@ Filter 1170 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-875 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 1171 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} +Filter 877 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-876 inet6/filter/FORWARD -j limit-876 @@ -13192,7 +10933,7 @@ Filter 1171 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1172 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} +Filter 878 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-877 inet6/filter/FORWARD -j limit-877 @@ -13205,7 +10946,7 @@ Filter 1172 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-877 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1173 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} +Filter 879 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-878 inet6/filter/FORWARD -j limit-878 @@ -13222,7 +10963,7 @@ Filter 1173 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1174 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} +Filter 880 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-879 inet6/filter/FORWARD -j limit-879 @@ -13233,7 +10974,7 @@ Filter 1174 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-879 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-879 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1175 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} +Filter 881 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-880 inet6/filter/FORWARD -j limit-880 @@ -13254,7 +10995,7 @@ Filter 1175 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/logaccept-final-27 -j ACCEPT inet6/filter/logaccept-final-27 -j ACCEPT -Filter 1176 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} +Filter 882 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-881 inet6/filter/FORWARD -j limit-881 @@ -13267,7 +11008,7 @@ Filter 1176 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-881 -m limit --limit 1/second -j LOG inet6/filter/limit-881 -m limit --limit 1/second -j LOG -Filter 1177 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} +Filter 883 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-882 inet6/filter/FORWARD -j limit-882 @@ -13284,7 +11025,7 @@ Filter 1177 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1178 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} +Filter 884 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-883 inet6/filter/FORWARD -j limit-883 @@ -13295,7 +11036,7 @@ Filter 1178 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-883 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-883 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 1179 {"flow-limit":{"interval":5}} +Filter 885 {"flow-limit":{"interval":5}} (filter-limit) inet/filter/FORWARD -j limit-884 inet6/filter/FORWARD -j limit-884 @@ -13303,12 +11044,12 @@ Filter 1179 {"flow-limit":{"interval":5}} inet6/filter/INPUT -j limit-884 inet/filter/OUTPUT -j limit-884 inet6/filter/OUTPUT -j limit-884 - inet/filter/limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 - inet6/filter/limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 - inet/filter/logdrop-289 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-289 -m limit --limit 1/second -j LOG - inet/filter/logdrop-289 -j DROP - inet6/filter/logdrop-289 -j DROP + inet/filter/limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-288 + inet6/filter/limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-288 + inet/filter/logdrop-288 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-288 -m limit --limit 1/second -j LOG + inet/filter/logdrop-288 -j DROP + inet6/filter/logdrop-288 -j DROP inet/filter/limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --set inet6/filter/limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT @@ -13318,7 +11059,7 @@ Filter 1179 {"flow-limit":{"interval":5}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1180 {"action":"pass","flow-limit":{"interval":5}} +Filter 886 {"action":"pass","flow-limit":{"interval":5}} (filter-limit) inet/filter/FORWARD -j limit-885 inet6/filter/FORWARD -j limit-885 @@ -13326,16 +11067,16 @@ Filter 1180 {"action":"pass","flow-limit":{"interval":5}} inet6/filter/INPUT -j limit-885 inet/filter/OUTPUT -j limit-885 inet6/filter/OUTPUT -j limit-885 - inet/filter/limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 - inet6/filter/limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 - inet/filter/logdrop-290 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-290 -m limit --limit 1/second -j LOG - inet/filter/logdrop-290 -j DROP - inet6/filter/logdrop-290 -j DROP + inet/filter/limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 + inet6/filter/limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 + inet/filter/logdrop-289 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-289 -m limit --limit 1/second -j LOG + inet/filter/logdrop-289 -j DROP + inet6/filter/logdrop-289 -j DROP inet/filter/limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --set inet6/filter/limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1181 {"flow-limit":{"interval":5},"log":true} +Filter 887 {"flow-limit":{"interval":5},"log":true} (filter-limit) inet/filter/FORWARD -j limit-886 inet6/filter/FORWARD -j limit-886 @@ -13343,12 +11084,12 @@ Filter 1181 {"flow-limit":{"interval":5},"log":true} inet6/filter/INPUT -j limit-886 inet/filter/OUTPUT -j limit-886 inet6/filter/OUTPUT -j limit-886 - inet/filter/limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 - inet6/filter/limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 - inet/filter/logdrop-291 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-291 -m limit --limit 1/second -j LOG - inet/filter/logdrop-291 -j DROP - inet6/filter/logdrop-291 -j DROP + inet/filter/limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 + inet6/filter/limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 + inet/filter/logdrop-290 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-290 -m limit --limit 1/second -j LOG + inet/filter/logdrop-290 -j DROP + inet6/filter/logdrop-290 -j DROP inet/filter/limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --set inet6/filter/limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-28 @@ -13362,7 +11103,7 @@ Filter 1181 {"flow-limit":{"interval":5},"log":true} inet/filter/logaccept-final-28 -j ACCEPT inet6/filter/logaccept-final-28 -j ACCEPT -Filter 1182 {"action":"pass","flow-limit":{"interval":5},"log":true} +Filter 888 {"action":"pass","flow-limit":{"interval":5},"log":true} (filter-limit) inet/filter/FORWARD -j limit-887 inet6/filter/FORWARD -j limit-887 @@ -13370,16 +11111,16 @@ Filter 1182 {"action":"pass","flow-limit":{"interval":5}, inet6/filter/INPUT -j limit-887 inet/filter/OUTPUT -j limit-887 inet6/filter/OUTPUT -j limit-887 - inet/filter/limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 - inet6/filter/limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 - inet/filter/logdrop-292 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-292 -m limit --limit 1/second -j LOG - inet/filter/logdrop-292 -j DROP - inet6/filter/logdrop-292 -j DROP + inet/filter/limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 + inet6/filter/limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 + inet/filter/logdrop-291 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-291 -m limit --limit 1/second -j LOG + inet/filter/logdrop-291 -j DROP + inet6/filter/logdrop-291 -j DROP inet/filter/limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1183 {"flow-limit":{"interval":5},"log":"none"} +Filter 889 {"flow-limit":{"interval":5},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-888 inet6/filter/FORWARD -j limit-888 @@ -13387,12 +11128,12 @@ Filter 1183 {"flow-limit":{"interval":5},"log":"none"} inet6/filter/INPUT -j limit-888 inet/filter/OUTPUT -j limit-888 inet6/filter/OUTPUT -j limit-888 - inet/filter/limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 - inet6/filter/limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 - inet/filter/logdrop-293 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-293 -m limit --limit 1/second -j LOG - inet/filter/logdrop-293 -j DROP - inet6/filter/logdrop-293 -j DROP + inet/filter/limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 + inet6/filter/limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 + inet/filter/logdrop-292 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-292 -m limit --limit 1/second -j LOG + inet/filter/logdrop-292 -j DROP + inet6/filter/logdrop-292 -j DROP inet/filter/limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --set inet6/filter/limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT @@ -13402,7 +11143,7 @@ Filter 1183 {"flow-limit":{"interval":5},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1184 {"action":"pass","flow-limit":{"interval":5},"log":"none"} +Filter 890 {"action":"pass","flow-limit":{"interval":5},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-889 inet6/filter/FORWARD -j limit-889 @@ -13410,16 +11151,16 @@ Filter 1184 {"action":"pass","flow-limit":{"interval":5}, inet6/filter/INPUT -j limit-889 inet/filter/OUTPUT -j limit-889 inet6/filter/OUTPUT -j limit-889 - inet/filter/limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 - inet6/filter/limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 - inet/filter/logdrop-294 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-294 -m limit --limit 1/second -j LOG - inet/filter/logdrop-294 -j DROP - inet6/filter/logdrop-294 -j DROP + inet/filter/limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 + inet6/filter/limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 + inet/filter/logdrop-293 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-293 -m limit --limit 1/second -j LOG + inet/filter/logdrop-293 -j DROP + inet6/filter/logdrop-293 -j DROP inet/filter/limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --set inet6/filter/limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1185 {"flow-limit":{"interval":5,"name":"A"}} +Filter 891 {"flow-limit":{"interval":5,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-890 inet6/filter/FORWARD -j limit-890 @@ -13427,12 +11168,12 @@ Filter 1185 {"flow-limit":{"interval":5,"name":"A"}} inet6/filter/INPUT -j limit-890 inet/filter/OUTPUT -j limit-890 inet6/filter/OUTPUT -j limit-890 - inet/filter/limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 - inet6/filter/limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 - inet/filter/logdrop-295 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-295 -m limit --limit 1/second -j LOG - inet/filter/logdrop-295 -j DROP - inet6/filter/logdrop-295 -j DROP + inet/filter/limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 + inet6/filter/limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 + inet/filter/logdrop-294 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-294 -m limit --limit 1/second -j LOG + inet/filter/logdrop-294 -j DROP + inet6/filter/logdrop-294 -j DROP inet/filter/limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT @@ -13442,7 +11183,7 @@ Filter 1185 {"flow-limit":{"interval":5,"name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1186 {"action":"pass","flow-limit":{"interval":5,"name":"A"}} +Filter 892 {"action":"pass","flow-limit":{"interval":5,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-891 inet6/filter/FORWARD -j limit-891 @@ -13450,16 +11191,16 @@ Filter 1186 {"action":"pass","flow-limit":{"interval":5," inet6/filter/INPUT -j limit-891 inet/filter/OUTPUT -j limit-891 inet6/filter/OUTPUT -j limit-891 - inet/filter/limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 - inet6/filter/limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 - inet/filter/logdrop-296 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-296 -m limit --limit 1/second -j LOG - inet/filter/logdrop-296 -j DROP - inet6/filter/logdrop-296 -j DROP + inet/filter/limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 + inet6/filter/limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 + inet/filter/logdrop-295 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-295 -m limit --limit 1/second -j LOG + inet/filter/logdrop-295 -j DROP + inet6/filter/logdrop-295 -j DROP inet/filter/limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1187 {"flow-limit":{"interval":5,"name":"A"},"log":true} +Filter 893 {"flow-limit":{"interval":5,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-892 inet6/filter/FORWARD -j limit-892 @@ -13467,12 +11208,12 @@ Filter 1187 {"flow-limit":{"interval":5,"name":"A"},"log" inet6/filter/INPUT -j limit-892 inet/filter/OUTPUT -j limit-892 inet6/filter/OUTPUT -j limit-892 - inet/filter/limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 - inet6/filter/limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 - inet/filter/logdrop-297 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-297 -m limit --limit 1/second -j LOG - inet/filter/logdrop-297 -j DROP - inet6/filter/logdrop-297 -j DROP + inet/filter/limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 + inet6/filter/limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 + inet/filter/logdrop-296 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-296 -m limit --limit 1/second -j LOG + inet/filter/logdrop-296 -j DROP + inet6/filter/logdrop-296 -j DROP inet/filter/limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-29 @@ -13486,7 +11227,7 @@ Filter 1187 {"flow-limit":{"interval":5,"name":"A"},"log" inet/filter/logaccept-final-29 -j ACCEPT inet6/filter/logaccept-final-29 -j ACCEPT -Filter 1188 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":true} +Filter 894 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-893 inet6/filter/FORWARD -j limit-893 @@ -13494,16 +11235,16 @@ Filter 1188 {"action":"pass","flow-limit":{"interval":5," inet6/filter/INPUT -j limit-893 inet/filter/OUTPUT -j limit-893 inet6/filter/OUTPUT -j limit-893 - inet/filter/limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 - inet6/filter/limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 - inet/filter/logdrop-298 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-298 -m limit --limit 1/second -j LOG - inet/filter/logdrop-298 -j DROP - inet6/filter/logdrop-298 -j DROP + inet/filter/limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 + inet6/filter/limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 + inet/filter/logdrop-297 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-297 -m limit --limit 1/second -j LOG + inet/filter/logdrop-297 -j DROP + inet6/filter/logdrop-297 -j DROP inet/filter/limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1189 {"flow-limit":{"interval":5,"name":"A"},"log":"none"} +Filter 895 {"flow-limit":{"interval":5,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-894 inet6/filter/FORWARD -j limit-894 @@ -13511,12 +11252,12 @@ Filter 1189 {"flow-limit":{"interval":5,"name":"A"},"log" inet6/filter/INPUT -j limit-894 inet/filter/OUTPUT -j limit-894 inet6/filter/OUTPUT -j limit-894 - inet/filter/limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 - inet6/filter/limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 - inet/filter/logdrop-299 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-299 -m limit --limit 1/second -j LOG - inet/filter/logdrop-299 -j DROP - inet6/filter/logdrop-299 -j DROP + inet/filter/limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 + inet6/filter/limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 + inet/filter/logdrop-298 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-298 -m limit --limit 1/second -j LOG + inet/filter/logdrop-298 -j DROP + inet6/filter/logdrop-298 -j DROP inet/filter/limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT @@ -13526,7 +11267,7 @@ Filter 1189 {"flow-limit":{"interval":5,"name":"A"},"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1190 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"none"} +Filter 896 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-895 inet6/filter/FORWARD -j limit-895 @@ -13534,16 +11275,16 @@ Filter 1190 {"action":"pass","flow-limit":{"interval":5," inet6/filter/INPUT -j limit-895 inet/filter/OUTPUT -j limit-895 inet6/filter/OUTPUT -j limit-895 - inet/filter/limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-300 - inet6/filter/limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-300 - inet/filter/logdrop-300 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-300 -m limit --limit 1/second -j LOG - inet/filter/logdrop-300 -j DROP - inet6/filter/logdrop-300 -j DROP + inet/filter/limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 + inet6/filter/limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 + inet/filter/logdrop-299 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-299 -m limit --limit 1/second -j LOG + inet/filter/logdrop-299 -j DROP + inet6/filter/logdrop-299 -j DROP inet/filter/limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1191 {"flow-limit":{"interval":5,"name":"A","update":false}} +Filter 897 {"flow-limit":{"interval":5,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-896 inet6/filter/FORWARD -j limit-896 @@ -13551,12 +11292,12 @@ Filter 1191 {"flow-limit":{"interval":5,"name":"A","updat inet6/filter/INPUT -j limit-896 inet/filter/OUTPUT -j limit-896 inet6/filter/OUTPUT -j limit-896 - inet/filter/limit-896 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 - inet6/filter/limit-896 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 - inet/filter/logdrop-301 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-301 -m limit --limit 1/second -j LOG - inet/filter/logdrop-301 -j DROP - inet6/filter/logdrop-301 -j DROP + inet/filter/limit-896 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-300 + inet6/filter/limit-896 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-300 + inet/filter/logdrop-300 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-300 -m limit --limit 1/second -j LOG + inet/filter/logdrop-300 -j DROP + inet6/filter/logdrop-300 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -13564,7 +11305,7 @@ Filter 1191 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1192 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false}} +Filter 898 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-897 inet6/filter/FORWARD -j limit-897 @@ -13572,14 +11313,14 @@ Filter 1192 {"action":"pass","flow-limit":{"interval":5," inet6/filter/INPUT -j limit-897 inet/filter/OUTPUT -j limit-897 inet6/filter/OUTPUT -j limit-897 - inet/filter/limit-897 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 - inet6/filter/limit-897 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 - inet/filter/logdrop-302 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-302 -m limit --limit 1/second -j LOG - inet/filter/logdrop-302 -j DROP - inet6/filter/logdrop-302 -j DROP + inet/filter/limit-897 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 + inet6/filter/limit-897 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 + inet/filter/logdrop-301 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-301 -m limit --limit 1/second -j LOG + inet/filter/logdrop-301 -j DROP + inet6/filter/logdrop-301 -j DROP -Filter 1193 {"flow-limit":{"interval":5,"name":"A","update":false},"log":true} +Filter 899 {"flow-limit":{"interval":5,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-898 inet6/filter/FORWARD -j limit-898 @@ -13587,12 +11328,12 @@ Filter 1193 {"flow-limit":{"interval":5,"name":"A","updat inet6/filter/INPUT -j limit-898 inet/filter/OUTPUT -j limit-898 inet6/filter/OUTPUT -j limit-898 - inet/filter/limit-898 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 - inet6/filter/limit-898 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 - inet/filter/logdrop-303 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-303 -m limit --limit 1/second -j LOG - inet/filter/logdrop-303 -j DROP - inet6/filter/logdrop-303 -j DROP + inet/filter/limit-898 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 + inet6/filter/limit-898 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 + inet/filter/logdrop-302 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-302 -m limit --limit 1/second -j LOG + inet/filter/logdrop-302 -j DROP + inet6/filter/logdrop-302 -j DROP inet/filter/FORWARD -j logaccept-final-30 inet6/filter/FORWARD -j logaccept-final-30 inet/filter/INPUT -j logaccept-final-30 @@ -13604,7 +11345,7 @@ Filter 1193 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/logaccept-final-30 -j ACCEPT inet6/filter/logaccept-final-30 -j ACCEPT -Filter 1194 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":true} +Filter 900 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-899 inet6/filter/FORWARD -j limit-899 @@ -13612,16 +11353,16 @@ Filter 1194 {"action":"pass","flow-limit":{"interval":5," inet6/filter/INPUT -j limit-899 inet/filter/OUTPUT -j limit-899 inet6/filter/OUTPUT -j limit-899 - inet/filter/limit-899 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 - inet6/filter/limit-899 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 - inet/filter/logdrop-304 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-304 -m limit --limit 1/second -j LOG - inet/filter/logdrop-304 -j DROP - inet6/filter/logdrop-304 -j DROP + inet/filter/limit-899 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 + inet6/filter/limit-899 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 + inet/filter/logdrop-303 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-303 -m limit --limit 1/second -j LOG + inet/filter/logdrop-303 -j DROP + inet6/filter/logdrop-303 -j DROP inet/filter/limit-899 -m limit --limit 1/second -j LOG inet6/filter/limit-899 -m limit --limit 1/second -j LOG -Filter 1195 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} +Filter 901 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-900 inet6/filter/FORWARD -j limit-900 @@ -13629,12 +11370,12 @@ Filter 1195 {"flow-limit":{"interval":5,"name":"A","updat inet6/filter/INPUT -j limit-900 inet/filter/OUTPUT -j limit-900 inet6/filter/OUTPUT -j limit-900 - inet/filter/limit-900 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 - inet6/filter/limit-900 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 - inet/filter/logdrop-305 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-305 -m limit --limit 1/second -j LOG - inet/filter/logdrop-305 -j DROP - inet6/filter/logdrop-305 -j DROP + inet/filter/limit-900 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 + inet6/filter/limit-900 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 + inet/filter/logdrop-304 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-304 -m limit --limit 1/second -j LOG + inet/filter/logdrop-304 -j DROP + inet6/filter/logdrop-304 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -13642,7 +11383,7 @@ Filter 1195 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1196 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} +Filter 902 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-901 inet6/filter/FORWARD -j limit-901 @@ -13650,14 +11391,14 @@ Filter 1196 {"action":"pass","flow-limit":{"interval":5," inet6/filter/INPUT -j limit-901 inet/filter/OUTPUT -j limit-901 inet6/filter/OUTPUT -j limit-901 - inet/filter/limit-901 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-306 - inet6/filter/limit-901 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-306 - inet/filter/logdrop-306 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-306 -m limit --limit 1/second -j LOG - inet/filter/logdrop-306 -j DROP - inet6/filter/logdrop-306 -j DROP + inet/filter/limit-901 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 + inet6/filter/limit-901 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 + inet/filter/logdrop-305 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-305 -m limit --limit 1/second -j LOG + inet/filter/logdrop-305 -j DROP + inet6/filter/logdrop-305 -j DROP -Filter 1197 {"flow-limit":{"addr":"dest","interval":5,"name":"A"}} +Filter 903 {"flow-limit":{"addr":"dest","interval":5,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-902 inet6/filter/FORWARD -j limit-902 @@ -13665,12 +11406,12 @@ Filter 1197 {"flow-limit":{"addr":"dest","interval":5,"na inet6/filter/INPUT -j limit-902 inet/filter/OUTPUT -j limit-902 inet6/filter/OUTPUT -j limit-902 - inet/filter/limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-307 - inet6/filter/limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-307 - inet/filter/logdrop-307 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-307 -m limit --limit 1/second -j LOG - inet/filter/logdrop-307 -j DROP - inet6/filter/logdrop-307 -j DROP + inet/filter/limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-306 + inet6/filter/limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-306 + inet/filter/logdrop-306 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-306 -m limit --limit 1/second -j LOG + inet/filter/logdrop-306 -j DROP + inet6/filter/logdrop-306 -j DROP inet/filter/limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT @@ -13680,7 +11421,7 @@ Filter 1197 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1198 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"}} +Filter 904 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-903 inet6/filter/FORWARD -j limit-903 @@ -13688,16 +11429,16 @@ Filter 1198 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-903 inet/filter/OUTPUT -j limit-903 inet6/filter/OUTPUT -j limit-903 - inet/filter/limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-308 - inet6/filter/limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-308 - inet/filter/logdrop-308 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-308 -m limit --limit 1/second -j LOG - inet/filter/logdrop-308 -j DROP - inet6/filter/logdrop-308 -j DROP + inet/filter/limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-307 + inet6/filter/limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-307 + inet/filter/logdrop-307 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-307 -m limit --limit 1/second -j LOG + inet/filter/logdrop-307 -j DROP + inet6/filter/logdrop-307 -j DROP inet/filter/limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1199 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} +Filter 905 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-904 inet6/filter/FORWARD -j limit-904 @@ -13705,12 +11446,12 @@ Filter 1199 {"flow-limit":{"addr":"dest","interval":5,"na inet6/filter/INPUT -j limit-904 inet/filter/OUTPUT -j limit-904 inet6/filter/OUTPUT -j limit-904 - inet/filter/limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-309 - inet6/filter/limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-309 - inet/filter/logdrop-309 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-309 -m limit --limit 1/second -j LOG - inet/filter/logdrop-309 -j DROP - inet6/filter/logdrop-309 -j DROP + inet/filter/limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-308 + inet6/filter/limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-308 + inet/filter/logdrop-308 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-308 -m limit --limit 1/second -j LOG + inet/filter/logdrop-308 -j DROP + inet6/filter/logdrop-308 -j DROP inet/filter/limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-31 @@ -13724,7 +11465,7 @@ Filter 1199 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/logaccept-final-31 -j ACCEPT inet6/filter/logaccept-final-31 -j ACCEPT -Filter 1200 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} +Filter 906 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-905 inet6/filter/FORWARD -j limit-905 @@ -13732,16 +11473,16 @@ Filter 1200 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-905 inet/filter/OUTPUT -j limit-905 inet6/filter/OUTPUT -j limit-905 - inet/filter/limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 - inet6/filter/limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 - inet/filter/logdrop-310 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-310 -m limit --limit 1/second -j LOG - inet/filter/logdrop-310 -j DROP - inet6/filter/logdrop-310 -j DROP + inet/filter/limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-309 + inet6/filter/limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-309 + inet/filter/logdrop-309 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-309 -m limit --limit 1/second -j LOG + inet/filter/logdrop-309 -j DROP + inet6/filter/logdrop-309 -j DROP inet/filter/limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1201 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} +Filter 907 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-906 inet6/filter/FORWARD -j limit-906 @@ -13749,12 +11490,12 @@ Filter 1201 {"flow-limit":{"addr":"dest","interval":5,"na inet6/filter/INPUT -j limit-906 inet/filter/OUTPUT -j limit-906 inet6/filter/OUTPUT -j limit-906 - inet/filter/limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 - inet6/filter/limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 - inet/filter/logdrop-311 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-311 -m limit --limit 1/second -j LOG - inet/filter/logdrop-311 -j DROP - inet6/filter/logdrop-311 -j DROP + inet/filter/limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 + inet6/filter/limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 + inet/filter/logdrop-310 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-310 -m limit --limit 1/second -j LOG + inet/filter/logdrop-310 -j DROP + inet6/filter/logdrop-310 -j DROP inet/filter/limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT @@ -13764,7 +11505,7 @@ Filter 1201 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1202 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} +Filter 908 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-907 inet6/filter/FORWARD -j limit-907 @@ -13772,16 +11513,16 @@ Filter 1202 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-907 inet/filter/OUTPUT -j limit-907 inet6/filter/OUTPUT -j limit-907 - inet/filter/limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-312 - inet6/filter/limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-312 - inet/filter/logdrop-312 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-312 -m limit --limit 1/second -j LOG - inet/filter/logdrop-312 -j DROP - inet6/filter/logdrop-312 -j DROP + inet/filter/limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 + inet6/filter/limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 + inet/filter/logdrop-311 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-311 -m limit --limit 1/second -j LOG + inet/filter/logdrop-311 -j DROP + inet6/filter/logdrop-311 -j DROP inet/filter/limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1203 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} +Filter 909 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-908 inet6/filter/FORWARD -j limit-908 @@ -13789,12 +11530,12 @@ Filter 1203 {"flow-limit":{"addr":"dest","interval":5,"na inet6/filter/INPUT -j limit-908 inet/filter/OUTPUT -j limit-908 inet6/filter/OUTPUT -j limit-908 - inet/filter/limit-908 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-313 - inet6/filter/limit-908 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-313 - inet/filter/logdrop-313 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-313 -m limit --limit 1/second -j LOG - inet/filter/logdrop-313 -j DROP - inet6/filter/logdrop-313 -j DROP + inet/filter/limit-908 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-312 + inet6/filter/limit-908 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-312 + inet/filter/logdrop-312 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-312 -m limit --limit 1/second -j LOG + inet/filter/logdrop-312 -j DROP + inet6/filter/logdrop-312 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -13802,7 +11543,7 @@ Filter 1203 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1204 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} +Filter 910 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-909 inet6/filter/FORWARD -j limit-909 @@ -13810,14 +11551,14 @@ Filter 1204 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-909 inet/filter/OUTPUT -j limit-909 inet6/filter/OUTPUT -j limit-909 - inet/filter/limit-909 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-314 - inet6/filter/limit-909 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-314 - inet/filter/logdrop-314 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-314 -m limit --limit 1/second -j LOG - inet/filter/logdrop-314 -j DROP - inet6/filter/logdrop-314 -j DROP + inet/filter/limit-909 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-313 + inet6/filter/limit-909 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-313 + inet/filter/logdrop-313 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-313 -m limit --limit 1/second -j LOG + inet/filter/logdrop-313 -j DROP + inet6/filter/logdrop-313 -j DROP -Filter 1205 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +Filter 911 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-910 inet6/filter/FORWARD -j limit-910 @@ -13825,12 +11566,12 @@ Filter 1205 {"flow-limit":{"addr":"dest","interval":5,"na inet6/filter/INPUT -j limit-910 inet/filter/OUTPUT -j limit-910 inet6/filter/OUTPUT -j limit-910 - inet/filter/limit-910 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-315 - inet6/filter/limit-910 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-315 - inet/filter/logdrop-315 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-315 -m limit --limit 1/second -j LOG - inet/filter/logdrop-315 -j DROP - inet6/filter/logdrop-315 -j DROP + inet/filter/limit-910 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-314 + inet6/filter/limit-910 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-314 + inet/filter/logdrop-314 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-314 -m limit --limit 1/second -j LOG + inet/filter/logdrop-314 -j DROP + inet6/filter/logdrop-314 -j DROP inet/filter/FORWARD -j logaccept-final-32 inet6/filter/FORWARD -j logaccept-final-32 inet/filter/INPUT -j logaccept-final-32 @@ -13842,7 +11583,7 @@ Filter 1205 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/logaccept-final-32 -j ACCEPT inet6/filter/logaccept-final-32 -j ACCEPT -Filter 1206 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +Filter 912 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-911 inet6/filter/FORWARD -j limit-911 @@ -13850,16 +11591,16 @@ Filter 1206 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-911 inet/filter/OUTPUT -j limit-911 inet6/filter/OUTPUT -j limit-911 - inet/filter/limit-911 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-316 - inet6/filter/limit-911 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-316 - inet/filter/logdrop-316 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-316 -m limit --limit 1/second -j LOG - inet/filter/logdrop-316 -j DROP - inet6/filter/logdrop-316 -j DROP + inet/filter/limit-911 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-315 + inet6/filter/limit-911 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-315 + inet/filter/logdrop-315 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-315 -m limit --limit 1/second -j LOG + inet/filter/logdrop-315 -j DROP + inet6/filter/logdrop-315 -j DROP inet/filter/limit-911 -m limit --limit 1/second -j LOG inet6/filter/limit-911 -m limit --limit 1/second -j LOG -Filter 1207 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} +Filter 913 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-912 inet6/filter/FORWARD -j limit-912 @@ -13867,12 +11608,12 @@ Filter 1207 {"flow-limit":{"addr":"dest","interval":5,"na inet6/filter/INPUT -j limit-912 inet/filter/OUTPUT -j limit-912 inet6/filter/OUTPUT -j limit-912 - inet/filter/limit-912 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-317 - inet6/filter/limit-912 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-317 - inet/filter/logdrop-317 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-317 -m limit --limit 1/second -j LOG - inet/filter/logdrop-317 -j DROP - inet6/filter/logdrop-317 -j DROP + inet/filter/limit-912 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-316 + inet6/filter/limit-912 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-316 + inet/filter/logdrop-316 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-316 -m limit --limit 1/second -j LOG + inet/filter/logdrop-316 -j DROP + inet6/filter/logdrop-316 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -13880,7 +11621,7 @@ Filter 1207 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1208 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} +Filter 914 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-913 inet6/filter/FORWARD -j limit-913 @@ -13888,14 +11629,14 @@ Filter 1208 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-913 inet/filter/OUTPUT -j limit-913 inet6/filter/OUTPUT -j limit-913 - inet/filter/limit-913 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-318 - inet6/filter/limit-913 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-318 - inet/filter/logdrop-318 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-318 -m limit --limit 1/second -j LOG - inet/filter/logdrop-318 -j DROP - inet6/filter/logdrop-318 -j DROP + inet/filter/limit-913 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-317 + inet6/filter/limit-913 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-317 + inet/filter/logdrop-317 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-317 -m limit --limit 1/second -j LOG + inet/filter/logdrop-317 -j DROP + inet6/filter/logdrop-317 -j DROP -Filter 1209 {"flow-limit":{"interval":5,"name":"C"}} +Filter 915 {"flow-limit":{"interval":5,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-914 inet6/filter/FORWARD -j limit-914 @@ -13903,12 +11644,12 @@ Filter 1209 {"flow-limit":{"interval":5,"name":"C"}} inet6/filter/INPUT -j limit-914 inet/filter/OUTPUT -j limit-914 inet6/filter/OUTPUT -j limit-914 - inet/filter/limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-319 - inet6/filter/limit-914 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-319 - inet/filter/logdrop-319 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-319 -m limit --limit 1/second -j LOG - inet/filter/logdrop-319 -j DROP - inet6/filter/logdrop-319 -j DROP + inet/filter/limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-318 + inet6/filter/limit-914 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-318 + inet/filter/logdrop-318 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-318 -m limit --limit 1/second -j LOG + inet/filter/logdrop-318 -j DROP + inet6/filter/logdrop-318 -j DROP inet/filter/limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-914 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j ACCEPT @@ -13918,7 +11659,7 @@ Filter 1209 {"flow-limit":{"interval":5,"name":"C"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1210 {"action":"pass","flow-limit":{"interval":5,"name":"C"}} +Filter 916 {"action":"pass","flow-limit":{"interval":5,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-915 inet6/filter/FORWARD -j limit-915 @@ -13926,16 +11667,16 @@ Filter 1210 {"action":"pass","flow-limit":{"interval":5," inet6/filter/INPUT -j limit-915 inet/filter/OUTPUT -j limit-915 inet6/filter/OUTPUT -j limit-915 - inet/filter/limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-320 - inet6/filter/limit-915 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-320 - inet/filter/logdrop-320 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-320 -m limit --limit 1/second -j LOG - inet/filter/logdrop-320 -j DROP - inet6/filter/logdrop-320 -j DROP + inet/filter/limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-319 + inet6/filter/limit-915 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-319 + inet/filter/logdrop-319 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-319 -m limit --limit 1/second -j LOG + inet/filter/logdrop-319 -j DROP + inet6/filter/logdrop-319 -j DROP inet/filter/limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-915 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1211 {"flow-limit":{"interval":5,"name":"C"},"log":true} +Filter 917 {"flow-limit":{"interval":5,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-916 inet6/filter/FORWARD -j limit-916 @@ -13943,12 +11684,12 @@ Filter 1211 {"flow-limit":{"interval":5,"name":"C"},"log" inet6/filter/INPUT -j limit-916 inet/filter/OUTPUT -j limit-916 inet6/filter/OUTPUT -j limit-916 - inet/filter/limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-321 - inet6/filter/limit-916 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-321 - inet/filter/logdrop-321 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-321 -m limit --limit 1/second -j LOG - inet/filter/logdrop-321 -j DROP - inet6/filter/logdrop-321 -j DROP + inet/filter/limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-320 + inet6/filter/limit-916 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-320 + inet/filter/logdrop-320 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-320 -m limit --limit 1/second -j LOG + inet/filter/logdrop-320 -j DROP + inet6/filter/logdrop-320 -j DROP inet/filter/limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-916 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j logaccept-final-33 @@ -13962,7 +11703,7 @@ Filter 1211 {"flow-limit":{"interval":5,"name":"C"},"log" inet/filter/logaccept-final-33 -j ACCEPT inet6/filter/logaccept-final-33 -j ACCEPT -Filter 1212 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":true} +Filter 918 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-917 inet6/filter/FORWARD -j limit-917 @@ -13970,16 +11711,16 @@ Filter 1212 {"action":"pass","flow-limit":{"interval":5," inet6/filter/INPUT -j limit-917 inet/filter/OUTPUT -j limit-917 inet6/filter/OUTPUT -j limit-917 - inet/filter/limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-322 - inet6/filter/limit-917 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-322 - inet/filter/logdrop-322 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-322 -m limit --limit 1/second -j LOG - inet/filter/logdrop-322 -j DROP - inet6/filter/logdrop-322 -j DROP + inet/filter/limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-321 + inet6/filter/limit-917 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-321 + inet/filter/logdrop-321 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-321 -m limit --limit 1/second -j LOG + inet/filter/logdrop-321 -j DROP + inet6/filter/logdrop-321 -j DROP inet/filter/limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-917 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 1213 {"flow-limit":{"interval":5,"name":"C"},"log":"none"} +Filter 919 {"flow-limit":{"interval":5,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-918 inet6/filter/FORWARD -j limit-918 @@ -13987,12 +11728,12 @@ Filter 1213 {"flow-limit":{"interval":5,"name":"C"},"log" inet6/filter/INPUT -j limit-918 inet/filter/OUTPUT -j limit-918 inet6/filter/OUTPUT -j limit-918 - inet/filter/limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-323 - inet6/filter/limit-918 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-323 - inet/filter/logdrop-323 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-323 -m limit --limit 1/second -j LOG - inet/filter/logdrop-323 -j DROP - inet6/filter/logdrop-323 -j DROP + inet/filter/limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-322 + inet6/filter/limit-918 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-322 + inet/filter/logdrop-322 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-322 -m limit --limit 1/second -j LOG + inet/filter/logdrop-322 -j DROP + inet6/filter/logdrop-322 -j DROP inet/filter/limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-918 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j ACCEPT @@ -14002,7 +11743,7 @@ Filter 1213 {"flow-limit":{"interval":5,"name":"C"},"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1214 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":"none"} +Filter 920 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-919 inet6/filter/FORWARD -j limit-919 @@ -14010,16 +11751,16 @@ Filter 1214 {"action":"pass","flow-limit":{"interval":5," inet6/filter/INPUT -j limit-919 inet/filter/OUTPUT -j limit-919 inet6/filter/OUTPUT -j limit-919 - inet/filter/limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-324 - inet6/filter/limit-919 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-324 - inet/filter/logdrop-324 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-324 -m limit --limit 1/second -j LOG - inet/filter/logdrop-324 -j DROP - inet6/filter/logdrop-324 -j DROP + inet/filter/limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-323 + inet6/filter/limit-919 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-323 + inet/filter/logdrop-323 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-323 -m limit --limit 1/second -j LOG + inet/filter/logdrop-323 -j DROP + inet6/filter/logdrop-323 -j DROP inet/filter/limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-919 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1215 {"flow-limit":{"interval":5,"name":"C","update":false}} +Filter 921 {"flow-limit":{"interval":5,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-920 inet6/filter/FORWARD -j limit-920 @@ -14027,12 +11768,12 @@ Filter 1215 {"flow-limit":{"interval":5,"name":"C","updat inet6/filter/INPUT -j limit-920 inet/filter/OUTPUT -j limit-920 inet6/filter/OUTPUT -j limit-920 - inet/filter/limit-920 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 - inet6/filter/limit-920 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-325 - inet/filter/logdrop-325 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-325 -m limit --limit 1/second -j LOG - inet/filter/logdrop-325 -j DROP - inet6/filter/logdrop-325 -j DROP + inet/filter/limit-920 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-324 + inet6/filter/limit-920 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-324 + inet/filter/logdrop-324 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-324 -m limit --limit 1/second -j LOG + inet/filter/logdrop-324 -j DROP + inet6/filter/logdrop-324 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -14040,7 +11781,7 @@ Filter 1215 {"flow-limit":{"interval":5,"name":"C","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1216 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false}} +Filter 922 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-921 inet6/filter/FORWARD -j limit-921 @@ -14048,14 +11789,14 @@ Filter 1216 {"action":"pass","flow-limit":{"interval":5," inet6/filter/INPUT -j limit-921 inet/filter/OUTPUT -j limit-921 inet6/filter/OUTPUT -j limit-921 - inet/filter/limit-921 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 - inet6/filter/limit-921 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-326 - inet/filter/logdrop-326 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-326 -m limit --limit 1/second -j LOG - inet/filter/logdrop-326 -j DROP - inet6/filter/logdrop-326 -j DROP + inet/filter/limit-921 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 + inet6/filter/limit-921 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-325 + inet/filter/logdrop-325 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-325 -m limit --limit 1/second -j LOG + inet/filter/logdrop-325 -j DROP + inet6/filter/logdrop-325 -j DROP -Filter 1217 {"flow-limit":{"interval":5,"name":"C","update":false},"log":true} +Filter 923 {"flow-limit":{"interval":5,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-922 inet6/filter/FORWARD -j limit-922 @@ -14063,12 +11804,12 @@ Filter 1217 {"flow-limit":{"interval":5,"name":"C","updat inet6/filter/INPUT -j limit-922 inet/filter/OUTPUT -j limit-922 inet6/filter/OUTPUT -j limit-922 - inet/filter/limit-922 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 - inet6/filter/limit-922 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-327 - inet/filter/logdrop-327 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-327 -m limit --limit 1/second -j LOG - inet/filter/logdrop-327 -j DROP - inet6/filter/logdrop-327 -j DROP + inet/filter/limit-922 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 + inet6/filter/limit-922 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-326 + inet/filter/logdrop-326 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-326 -m limit --limit 1/second -j LOG + inet/filter/logdrop-326 -j DROP + inet6/filter/logdrop-326 -j DROP inet/filter/FORWARD -j logaccept-final-34 inet6/filter/FORWARD -j logaccept-final-34 inet/filter/INPUT -j logaccept-final-34 @@ -14080,7 +11821,7 @@ Filter 1217 {"flow-limit":{"interval":5,"name":"C","updat inet/filter/logaccept-final-34 -j ACCEPT inet6/filter/logaccept-final-34 -j ACCEPT -Filter 1218 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":true} +Filter 924 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-923 inet6/filter/FORWARD -j limit-923 @@ -14088,16 +11829,16 @@ Filter 1218 {"action":"pass","flow-limit":{"interval":5," inet6/filter/INPUT -j limit-923 inet/filter/OUTPUT -j limit-923 inet6/filter/OUTPUT -j limit-923 - inet/filter/limit-923 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 - inet6/filter/limit-923 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-328 - inet/filter/logdrop-328 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-328 -m limit --limit 1/second -j LOG - inet/filter/logdrop-328 -j DROP - inet6/filter/logdrop-328 -j DROP + inet/filter/limit-923 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 + inet6/filter/limit-923 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-327 + inet/filter/logdrop-327 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-327 -m limit --limit 1/second -j LOG + inet/filter/logdrop-327 -j DROP + inet6/filter/logdrop-327 -j DROP inet/filter/limit-923 -m limit --limit 1/second -j LOG inet6/filter/limit-923 -m limit --limit 1/second -j LOG -Filter 1219 {"flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} +Filter 925 {"flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-924 inet6/filter/FORWARD -j limit-924 @@ -14105,12 +11846,12 @@ Filter 1219 {"flow-limit":{"interval":5,"name":"C","updat inet6/filter/INPUT -j limit-924 inet/filter/OUTPUT -j limit-924 inet6/filter/OUTPUT -j limit-924 - inet/filter/limit-924 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 - inet6/filter/limit-924 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-329 - inet/filter/logdrop-329 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-329 -m limit --limit 1/second -j LOG - inet/filter/logdrop-329 -j DROP - inet6/filter/logdrop-329 -j DROP + inet/filter/limit-924 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 + inet6/filter/limit-924 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-328 + inet/filter/logdrop-328 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-328 -m limit --limit 1/second -j LOG + inet/filter/logdrop-328 -j DROP + inet6/filter/logdrop-328 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -14118,7 +11859,7 @@ Filter 1219 {"flow-limit":{"interval":5,"name":"C","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1220 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} +Filter 926 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-925 inet6/filter/FORWARD -j limit-925 @@ -14126,14 +11867,14 @@ Filter 1220 {"action":"pass","flow-limit":{"interval":5," inet6/filter/INPUT -j limit-925 inet/filter/OUTPUT -j limit-925 inet6/filter/OUTPUT -j limit-925 - inet/filter/limit-925 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-330 - inet6/filter/limit-925 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-330 - inet/filter/logdrop-330 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-330 -m limit --limit 1/second -j LOG - inet/filter/logdrop-330 -j DROP - inet6/filter/logdrop-330 -j DROP + inet/filter/limit-925 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 + inet6/filter/limit-925 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-329 + inet/filter/logdrop-329 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-329 -m limit --limit 1/second -j LOG + inet/filter/logdrop-329 -j DROP + inet6/filter/logdrop-329 -j DROP -Filter 1221 {"flow-limit":{"addr":"dest","interval":5,"name":"C"}} +Filter 927 {"flow-limit":{"addr":"dest","interval":5,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-926 inet6/filter/FORWARD -j limit-926 @@ -14141,12 +11882,12 @@ Filter 1221 {"flow-limit":{"addr":"dest","interval":5,"na inet6/filter/INPUT -j limit-926 inet/filter/OUTPUT -j limit-926 inet6/filter/OUTPUT -j limit-926 - inet/filter/limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 - inet6/filter/limit-926 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 - inet/filter/logdrop-331 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-331 -m limit --limit 1/second -j LOG - inet/filter/logdrop-331 -j DROP - inet6/filter/logdrop-331 -j DROP + inet/filter/limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-330 + inet6/filter/limit-926 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-330 + inet/filter/logdrop-330 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-330 -m limit --limit 1/second -j LOG + inet/filter/logdrop-330 -j DROP + inet6/filter/logdrop-330 -j DROP inet/filter/limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-926 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j ACCEPT @@ -14156,7 +11897,7 @@ Filter 1221 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1222 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"}} +Filter 928 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-927 inet6/filter/FORWARD -j limit-927 @@ -14164,16 +11905,16 @@ Filter 1222 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-927 inet/filter/OUTPUT -j limit-927 inet6/filter/OUTPUT -j limit-927 - inet/filter/limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 - inet6/filter/limit-927 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 - inet/filter/logdrop-332 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-332 -m limit --limit 1/second -j LOG - inet/filter/logdrop-332 -j DROP - inet6/filter/logdrop-332 -j DROP + inet/filter/limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 + inet6/filter/limit-927 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 + inet/filter/logdrop-331 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-331 -m limit --limit 1/second -j LOG + inet/filter/logdrop-331 -j DROP + inet6/filter/logdrop-331 -j DROP inet/filter/limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-927 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1223 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} +Filter 929 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-928 inet6/filter/FORWARD -j limit-928 @@ -14181,12 +11922,12 @@ Filter 1223 {"flow-limit":{"addr":"dest","interval":5,"na inet6/filter/INPUT -j limit-928 inet/filter/OUTPUT -j limit-928 inet6/filter/OUTPUT -j limit-928 - inet/filter/limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 - inet6/filter/limit-928 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 - inet/filter/logdrop-333 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-333 -m limit --limit 1/second -j LOG - inet/filter/logdrop-333 -j DROP - inet6/filter/logdrop-333 -j DROP + inet/filter/limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 + inet6/filter/limit-928 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 + inet/filter/logdrop-332 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-332 -m limit --limit 1/second -j LOG + inet/filter/logdrop-332 -j DROP + inet6/filter/logdrop-332 -j DROP inet/filter/limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-928 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j logaccept-final-35 @@ -14200,7 +11941,7 @@ Filter 1223 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/logaccept-final-35 -j ACCEPT inet6/filter/logaccept-final-35 -j ACCEPT -Filter 1224 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} +Filter 930 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-929 inet6/filter/FORWARD -j limit-929 @@ -14208,16 +11949,16 @@ Filter 1224 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-929 inet/filter/OUTPUT -j limit-929 inet6/filter/OUTPUT -j limit-929 - inet/filter/limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 - inet6/filter/limit-929 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 - inet/filter/logdrop-334 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-334 -m limit --limit 1/second -j LOG - inet/filter/logdrop-334 -j DROP - inet6/filter/logdrop-334 -j DROP + inet/filter/limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 + inet6/filter/limit-929 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 + inet/filter/logdrop-333 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-333 -m limit --limit 1/second -j LOG + inet/filter/logdrop-333 -j DROP + inet6/filter/logdrop-333 -j DROP inet/filter/limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-929 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 1225 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} +Filter 931 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-930 inet6/filter/FORWARD -j limit-930 @@ -14225,12 +11966,12 @@ Filter 1225 {"flow-limit":{"addr":"dest","interval":5,"na inet6/filter/INPUT -j limit-930 inet/filter/OUTPUT -j limit-930 inet6/filter/OUTPUT -j limit-930 - inet/filter/limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 - inet6/filter/limit-930 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 - inet/filter/logdrop-335 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-335 -m limit --limit 1/second -j LOG - inet/filter/logdrop-335 -j DROP - inet6/filter/logdrop-335 -j DROP + inet/filter/limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 + inet6/filter/limit-930 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 + inet/filter/logdrop-334 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-334 -m limit --limit 1/second -j LOG + inet/filter/logdrop-334 -j DROP + inet6/filter/logdrop-334 -j DROP inet/filter/limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-930 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j ACCEPT @@ -14240,7 +11981,7 @@ Filter 1225 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1226 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} +Filter 932 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-931 inet6/filter/FORWARD -j limit-931 @@ -14248,16 +11989,16 @@ Filter 1226 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-931 inet/filter/OUTPUT -j limit-931 inet6/filter/OUTPUT -j limit-931 - inet/filter/limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-336 - inet6/filter/limit-931 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-336 - inet/filter/logdrop-336 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-336 -m limit --limit 1/second -j LOG - inet/filter/logdrop-336 -j DROP - inet6/filter/logdrop-336 -j DROP + inet/filter/limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 + inet6/filter/limit-931 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 + inet/filter/logdrop-335 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-335 -m limit --limit 1/second -j LOG + inet/filter/logdrop-335 -j DROP + inet6/filter/logdrop-335 -j DROP inet/filter/limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-931 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1227 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} +Filter 933 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-932 inet6/filter/FORWARD -j limit-932 @@ -14265,12 +12006,12 @@ Filter 1227 {"flow-limit":{"addr":"dest","interval":5,"na inet6/filter/INPUT -j limit-932 inet/filter/OUTPUT -j limit-932 inet6/filter/OUTPUT -j limit-932 - inet/filter/limit-932 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-337 - inet6/filter/limit-932 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-337 - inet/filter/logdrop-337 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-337 -m limit --limit 1/second -j LOG - inet/filter/logdrop-337 -j DROP - inet6/filter/logdrop-337 -j DROP + inet/filter/limit-932 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-336 + inet6/filter/limit-932 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-336 + inet/filter/logdrop-336 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-336 -m limit --limit 1/second -j LOG + inet/filter/logdrop-336 -j DROP + inet6/filter/logdrop-336 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -14278,7 +12019,7 @@ Filter 1227 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1228 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} +Filter 934 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-933 inet6/filter/FORWARD -j limit-933 @@ -14286,14 +12027,14 @@ Filter 1228 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-933 inet/filter/OUTPUT -j limit-933 inet6/filter/OUTPUT -j limit-933 - inet/filter/limit-933 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-338 - inet6/filter/limit-933 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-338 - inet/filter/logdrop-338 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-338 -m limit --limit 1/second -j LOG - inet/filter/logdrop-338 -j DROP - inet6/filter/logdrop-338 -j DROP + inet/filter/limit-933 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-337 + inet6/filter/limit-933 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-337 + inet/filter/logdrop-337 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-337 -m limit --limit 1/second -j LOG + inet/filter/logdrop-337 -j DROP + inet6/filter/logdrop-337 -j DROP -Filter 1229 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} +Filter 935 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-934 inet6/filter/FORWARD -j limit-934 @@ -14301,12 +12042,12 @@ Filter 1229 {"flow-limit":{"addr":"dest","interval":5,"na inet6/filter/INPUT -j limit-934 inet/filter/OUTPUT -j limit-934 inet6/filter/OUTPUT -j limit-934 - inet/filter/limit-934 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-339 - inet6/filter/limit-934 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-339 - inet/filter/logdrop-339 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-339 -m limit --limit 1/second -j LOG - inet/filter/logdrop-339 -j DROP - inet6/filter/logdrop-339 -j DROP + inet/filter/limit-934 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-338 + inet6/filter/limit-934 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-338 + inet/filter/logdrop-338 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-338 -m limit --limit 1/second -j LOG + inet/filter/logdrop-338 -j DROP + inet6/filter/logdrop-338 -j DROP inet/filter/FORWARD -j logaccept-final-36 inet6/filter/FORWARD -j logaccept-final-36 inet/filter/INPUT -j logaccept-final-36 @@ -14318,7 +12059,7 @@ Filter 1229 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/logaccept-final-36 -j ACCEPT inet6/filter/logaccept-final-36 -j ACCEPT -Filter 1230 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} +Filter 936 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-935 inet6/filter/FORWARD -j limit-935 @@ -14326,16 +12067,16 @@ Filter 1230 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-935 inet/filter/OUTPUT -j limit-935 inet6/filter/OUTPUT -j limit-935 - inet/filter/limit-935 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 - inet6/filter/limit-935 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 - inet/filter/logdrop-340 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-340 -m limit --limit 1/second -j LOG - inet/filter/logdrop-340 -j DROP - inet6/filter/logdrop-340 -j DROP + inet/filter/limit-935 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-339 + inet6/filter/limit-935 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-339 + inet/filter/logdrop-339 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-339 -m limit --limit 1/second -j LOG + inet/filter/logdrop-339 -j DROP + inet6/filter/logdrop-339 -j DROP inet/filter/limit-935 -m limit --limit 1/second -j LOG inet6/filter/limit-935 -m limit --limit 1/second -j LOG -Filter 1231 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} +Filter 937 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-936 inet6/filter/FORWARD -j limit-936 @@ -14343,12 +12084,12 @@ Filter 1231 {"flow-limit":{"addr":"dest","interval":5,"na inet6/filter/INPUT -j limit-936 inet/filter/OUTPUT -j limit-936 inet6/filter/OUTPUT -j limit-936 - inet/filter/limit-936 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 - inet6/filter/limit-936 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 - inet/filter/logdrop-341 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-341 -m limit --limit 1/second -j LOG - inet/filter/logdrop-341 -j DROP - inet6/filter/logdrop-341 -j DROP + inet/filter/limit-936 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 + inet6/filter/limit-936 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 + inet/filter/logdrop-340 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-340 -m limit --limit 1/second -j LOG + inet/filter/logdrop-340 -j DROP + inet6/filter/logdrop-340 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -14356,7 +12097,7 @@ Filter 1231 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1232 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} +Filter 938 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-937 inet6/filter/FORWARD -j limit-937 @@ -14364,14 +12105,14 @@ Filter 1232 {"action":"pass","flow-limit":{"addr":"dest", inet6/filter/INPUT -j limit-937 inet/filter/OUTPUT -j limit-937 inet6/filter/OUTPUT -j limit-937 - inet/filter/limit-937 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-342 - inet6/filter/limit-937 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-342 - inet/filter/logdrop-342 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-342 -m limit --limit 1/second -j LOG - inet/filter/logdrop-342 -j DROP - inet6/filter/logdrop-342 -j DROP + inet/filter/limit-937 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 + inet6/filter/limit-937 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 + inet/filter/logdrop-341 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-341 -m limit --limit 1/second -j LOG + inet/filter/logdrop-341 -j DROP + inet6/filter/logdrop-341 -j DROP -Filter 1233 {"flow-limit":{"interval":5,"log":false}} +Filter 939 {"flow-limit":{"interval":5,"log":false}} (filter-limit) inet/filter/FORWARD -j limit-938 inet6/filter/FORWARD -j limit-938 @@ -14390,7 +12131,7 @@ Filter 1233 {"flow-limit":{"interval":5,"log":false}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1234 {"action":"pass","flow-limit":{"interval":5,"log":false}} +Filter 940 {"action":"pass","flow-limit":{"interval":5,"log":false}} (filter-limit) inet/filter/FORWARD -j limit-939 inet6/filter/FORWARD -j limit-939 @@ -14403,7 +12144,7 @@ Filter 1234 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --set inet6/filter/limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1235 {"flow-limit":{"interval":5,"log":false},"log":true} +Filter 941 {"flow-limit":{"interval":5,"log":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-940 inet6/filter/FORWARD -j limit-940 @@ -14426,7 +12167,7 @@ Filter 1235 {"flow-limit":{"interval":5,"log":false},"log inet/filter/logaccept-final-37 -j ACCEPT inet6/filter/logaccept-final-37 -j ACCEPT -Filter 1236 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":true} +Filter 942 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-941 inet6/filter/FORWARD -j limit-941 @@ -14439,7 +12180,7 @@ Filter 1236 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1237 {"flow-limit":{"interval":5,"log":false},"log":"none"} +Filter 943 {"flow-limit":{"interval":5,"log":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-942 inet6/filter/FORWARD -j limit-942 @@ -14458,7 +12199,7 @@ Filter 1237 {"flow-limit":{"interval":5,"log":false},"log inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1238 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"none"} +Filter 944 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-943 inet6/filter/FORWARD -j limit-943 @@ -14471,7 +12212,7 @@ Filter 1238 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --set inet6/filter/limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1239 {"flow-limit":{"interval":5,"log":false,"name":"A"}} +Filter 945 {"flow-limit":{"interval":5,"log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-944 inet6/filter/FORWARD -j limit-944 @@ -14490,7 +12231,7 @@ Filter 1239 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1240 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"}} +Filter 946 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-945 inet6/filter/FORWARD -j limit-945 @@ -14503,7 +12244,7 @@ Filter 1240 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1241 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} +Filter 947 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-946 inet6/filter/FORWARD -j limit-946 @@ -14526,7 +12267,7 @@ Filter 1241 {"flow-limit":{"interval":5,"log":false,"name inet/filter/logaccept-final-38 -j ACCEPT inet6/filter/logaccept-final-38 -j ACCEPT -Filter 1242 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} +Filter 948 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-947 inet6/filter/FORWARD -j limit-947 @@ -14539,7 +12280,7 @@ Filter 1242 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1243 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} +Filter 949 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-948 inet6/filter/FORWARD -j limit-948 @@ -14558,7 +12299,7 @@ Filter 1243 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1244 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} +Filter 950 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-949 inet6/filter/FORWARD -j limit-949 @@ -14571,7 +12312,7 @@ Filter 1244 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1245 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false}} +Filter 951 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-950 inet6/filter/FORWARD -j limit-950 @@ -14588,7 +12329,7 @@ Filter 1245 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1246 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false}} +Filter 952 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-951 inet6/filter/FORWARD -j limit-951 @@ -14599,7 +12340,7 @@ Filter 1246 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-951 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1247 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} +Filter 953 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-952 inet6/filter/FORWARD -j limit-952 @@ -14620,7 +12361,7 @@ Filter 1247 {"flow-limit":{"interval":5,"log":false,"name inet/filter/logaccept-final-39 -j ACCEPT inet6/filter/logaccept-final-39 -j ACCEPT -Filter 1248 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} +Filter 954 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-953 inet6/filter/FORWARD -j limit-953 @@ -14633,7 +12374,7 @@ Filter 1248 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-953 -m limit --limit 1/second -j LOG inet6/filter/limit-953 -m limit --limit 1/second -j LOG -Filter 1249 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} +Filter 955 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-954 inet6/filter/FORWARD -j limit-954 @@ -14650,7 +12391,7 @@ Filter 1249 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1250 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} +Filter 956 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-955 inet6/filter/FORWARD -j limit-955 @@ -14661,7 +12402,7 @@ Filter 1250 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-955 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1251 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} +Filter 957 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-956 inet6/filter/FORWARD -j limit-956 @@ -14680,7 +12421,7 @@ Filter 1251 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1252 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} +Filter 958 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-957 inet6/filter/FORWARD -j limit-957 @@ -14693,7 +12434,7 @@ Filter 1252 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1253 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} +Filter 959 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-958 inet6/filter/FORWARD -j limit-958 @@ -14716,7 +12457,7 @@ Filter 1253 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-40 -j ACCEPT inet6/filter/logaccept-final-40 -j ACCEPT -Filter 1254 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} +Filter 960 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-959 inet6/filter/FORWARD -j limit-959 @@ -14729,7 +12470,7 @@ Filter 1254 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1255 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} +Filter 961 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-960 inet6/filter/FORWARD -j limit-960 @@ -14748,7 +12489,7 @@ Filter 1255 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1256 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} +Filter 962 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-961 inet6/filter/FORWARD -j limit-961 @@ -14761,7 +12502,7 @@ Filter 1256 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1257 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} +Filter 963 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-962 inet6/filter/FORWARD -j limit-962 @@ -14778,7 +12519,7 @@ Filter 1257 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1258 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} +Filter 964 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-963 inet6/filter/FORWARD -j limit-963 @@ -14789,7 +12530,7 @@ Filter 1258 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-963 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-963 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1259 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} +Filter 965 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-964 inet6/filter/FORWARD -j limit-964 @@ -14810,7 +12551,7 @@ Filter 1259 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-41 -j ACCEPT inet6/filter/logaccept-final-41 -j ACCEPT -Filter 1260 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} +Filter 966 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-965 inet6/filter/FORWARD -j limit-965 @@ -14823,7 +12564,7 @@ Filter 1260 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-965 -m limit --limit 1/second -j LOG inet6/filter/limit-965 -m limit --limit 1/second -j LOG -Filter 1261 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} +Filter 967 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-966 inet6/filter/FORWARD -j limit-966 @@ -14840,7 +12581,7 @@ Filter 1261 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1262 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} +Filter 968 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-967 inet6/filter/FORWARD -j limit-967 @@ -14851,7 +12592,7 @@ Filter 1262 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-967 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-967 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1263 {"flow-limit":{"interval":5,"log":false,"name":"C"}} +Filter 969 {"flow-limit":{"interval":5,"log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-968 inet6/filter/FORWARD -j limit-968 @@ -14870,7 +12611,7 @@ Filter 1263 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1264 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"}} +Filter 970 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-969 inet6/filter/FORWARD -j limit-969 @@ -14883,7 +12624,7 @@ Filter 1264 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-969 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1265 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} +Filter 971 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-970 inet6/filter/FORWARD -j limit-970 @@ -14906,7 +12647,7 @@ Filter 1265 {"flow-limit":{"interval":5,"log":false,"name inet/filter/logaccept-final-42 -j ACCEPT inet6/filter/logaccept-final-42 -j ACCEPT -Filter 1266 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} +Filter 972 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-971 inet6/filter/FORWARD -j limit-971 @@ -14919,7 +12660,7 @@ Filter 1266 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-971 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 1267 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} +Filter 973 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-972 inet6/filter/FORWARD -j limit-972 @@ -14938,7 +12679,7 @@ Filter 1267 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1268 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} +Filter 974 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-973 inet6/filter/FORWARD -j limit-973 @@ -14951,7 +12692,7 @@ Filter 1268 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-973 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1269 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false}} +Filter 975 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-974 inet6/filter/FORWARD -j limit-974 @@ -14968,7 +12709,7 @@ Filter 1269 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1270 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false}} +Filter 976 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-975 inet6/filter/FORWARD -j limit-975 @@ -14979,7 +12720,7 @@ Filter 1270 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-975 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-975 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1271 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} +Filter 977 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-976 inet6/filter/FORWARD -j limit-976 @@ -15000,7 +12741,7 @@ Filter 1271 {"flow-limit":{"interval":5,"log":false,"name inet/filter/logaccept-final-43 -j ACCEPT inet6/filter/logaccept-final-43 -j ACCEPT -Filter 1272 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} +Filter 978 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-977 inet6/filter/FORWARD -j limit-977 @@ -15013,7 +12754,7 @@ Filter 1272 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-977 -m limit --limit 1/second -j LOG inet6/filter/limit-977 -m limit --limit 1/second -j LOG -Filter 1273 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} +Filter 979 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-978 inet6/filter/FORWARD -j limit-978 @@ -15030,7 +12771,7 @@ Filter 1273 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1274 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} +Filter 980 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-979 inet6/filter/FORWARD -j limit-979 @@ -15041,7 +12782,7 @@ Filter 1274 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-979 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-979 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1275 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} +Filter 981 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-980 inet6/filter/FORWARD -j limit-980 @@ -15060,7 +12801,7 @@ Filter 1275 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1276 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} +Filter 982 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-981 inet6/filter/FORWARD -j limit-981 @@ -15073,7 +12814,7 @@ Filter 1276 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-981 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1277 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} +Filter 983 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-982 inet6/filter/FORWARD -j limit-982 @@ -15096,7 +12837,7 @@ Filter 1277 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-44 -j ACCEPT inet6/filter/logaccept-final-44 -j ACCEPT -Filter 1278 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} +Filter 984 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-983 inet6/filter/FORWARD -j limit-983 @@ -15109,7 +12850,7 @@ Filter 1278 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-983 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 1279 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} +Filter 985 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-984 inet6/filter/FORWARD -j limit-984 @@ -15128,7 +12869,7 @@ Filter 1279 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1280 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} +Filter 986 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-985 inet6/filter/FORWARD -j limit-985 @@ -15141,7 +12882,7 @@ Filter 1280 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-985 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1281 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} +Filter 987 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-986 inet6/filter/FORWARD -j limit-986 @@ -15158,7 +12899,7 @@ Filter 1281 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1282 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} +Filter 988 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-987 inet6/filter/FORWARD -j limit-987 @@ -15169,7 +12910,7 @@ Filter 1282 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-987 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-987 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1283 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} +Filter 989 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-988 inet6/filter/FORWARD -j limit-988 @@ -15190,7 +12931,7 @@ Filter 1283 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-45 -j ACCEPT inet6/filter/logaccept-final-45 -j ACCEPT -Filter 1284 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} +Filter 990 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-989 inet6/filter/FORWARD -j limit-989 @@ -15203,7 +12944,7 @@ Filter 1284 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-989 -m limit --limit 1/second -j LOG inet6/filter/limit-989 -m limit --limit 1/second -j LOG -Filter 1285 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} +Filter 991 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-990 inet6/filter/FORWARD -j limit-990 @@ -15220,7 +12961,7 @@ Filter 1285 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1286 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} +Filter 992 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-991 inet6/filter/FORWARD -j limit-991 @@ -15231,7 +12972,7 @@ Filter 1286 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-991 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-991 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1287 {"flow-limit":{"interval":5,"log":"none"}} +Filter 993 {"flow-limit":{"interval":5,"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-992 inet6/filter/FORWARD -j limit-992 @@ -15250,7 +12991,7 @@ Filter 1287 {"flow-limit":{"interval":5,"log":"none"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1288 {"action":"pass","flow-limit":{"interval":5,"log":"none"}} +Filter 994 {"action":"pass","flow-limit":{"interval":5,"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-993 inet6/filter/FORWARD -j limit-993 @@ -15263,7 +13004,7 @@ Filter 1288 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --set inet6/filter/limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1289 {"flow-limit":{"interval":5,"log":"none"},"log":true} +Filter 995 {"flow-limit":{"interval":5,"log":"none"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-994 inet6/filter/FORWARD -j limit-994 @@ -15286,7 +13027,7 @@ Filter 1289 {"flow-limit":{"interval":5,"log":"none"},"lo inet/filter/logaccept-final-46 -j ACCEPT inet6/filter/logaccept-final-46 -j ACCEPT -Filter 1290 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":true} +Filter 996 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-995 inet6/filter/FORWARD -j limit-995 @@ -15299,7 +13040,7 @@ Filter 1290 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1291 {"flow-limit":{"interval":5,"log":"none"},"log":"none"} +Filter 997 {"flow-limit":{"interval":5,"log":"none"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-996 inet6/filter/FORWARD -j limit-996 @@ -15318,7 +13059,7 @@ Filter 1291 {"flow-limit":{"interval":5,"log":"none"},"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1292 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"none"} +Filter 998 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-997 inet6/filter/FORWARD -j limit-997 @@ -15331,7 +13072,7 @@ Filter 1292 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --set inet6/filter/limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1293 {"flow-limit":{"interval":5,"log":"none","name":"A"}} +Filter 999 {"flow-limit":{"interval":5,"log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-998 inet6/filter/FORWARD -j limit-998 @@ -15350,7 +13091,7 @@ Filter 1293 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1294 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"}} +Filter 1000 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-999 inet6/filter/FORWARD -j limit-999 @@ -15363,7 +13104,7 @@ Filter 1294 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1295 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} +Filter 1001 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1000 inet6/filter/FORWARD -j limit-1000 @@ -15386,7 +13127,7 @@ Filter 1295 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/logaccept-final-47 -j ACCEPT inet6/filter/logaccept-final-47 -j ACCEPT -Filter 1296 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} +Filter 1002 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1001 inet6/filter/FORWARD -j limit-1001 @@ -15399,7 +13140,7 @@ Filter 1296 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1297 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} +Filter 1003 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1002 inet6/filter/FORWARD -j limit-1002 @@ -15418,7 +13159,7 @@ Filter 1297 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1298 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} +Filter 1004 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1003 inet6/filter/FORWARD -j limit-1003 @@ -15431,7 +13172,7 @@ Filter 1298 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1299 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false}} +Filter 1005 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-1004 inet6/filter/FORWARD -j limit-1004 @@ -15448,7 +13189,7 @@ Filter 1299 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1300 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false}} +Filter 1006 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-1005 inet6/filter/FORWARD -j limit-1005 @@ -15459,7 +13200,7 @@ Filter 1300 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1301 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} +Filter 1007 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1006 inet6/filter/FORWARD -j limit-1006 @@ -15480,7 +13221,7 @@ Filter 1301 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/logaccept-final-48 -j ACCEPT inet6/filter/logaccept-final-48 -j ACCEPT -Filter 1302 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} +Filter 1008 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1007 inet6/filter/FORWARD -j limit-1007 @@ -15493,7 +13234,7 @@ Filter 1302 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-1007 -m limit --limit 1/second -j LOG inet6/filter/limit-1007 -m limit --limit 1/second -j LOG -Filter 1303 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} +Filter 1009 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1008 inet6/filter/FORWARD -j limit-1008 @@ -15510,7 +13251,7 @@ Filter 1303 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1304 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} +Filter 1010 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1009 inet6/filter/FORWARD -j limit-1009 @@ -15521,7 +13262,7 @@ Filter 1304 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1305 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} +Filter 1011 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-1010 inet6/filter/FORWARD -j limit-1010 @@ -15540,7 +13281,7 @@ Filter 1305 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1306 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} +Filter 1012 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-1011 inet6/filter/FORWARD -j limit-1011 @@ -15553,7 +13294,7 @@ Filter 1306 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1307 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} +Filter 1013 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1012 inet6/filter/FORWARD -j limit-1012 @@ -15576,7 +13317,7 @@ Filter 1307 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-49 -j ACCEPT inet6/filter/logaccept-final-49 -j ACCEPT -Filter 1308 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} +Filter 1014 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1013 inet6/filter/FORWARD -j limit-1013 @@ -15589,7 +13330,7 @@ Filter 1308 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 1309 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +Filter 1015 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1014 inet6/filter/FORWARD -j limit-1014 @@ -15608,7 +13349,7 @@ Filter 1309 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1310 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +Filter 1016 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1015 inet6/filter/FORWARD -j limit-1015 @@ -15621,7 +13362,7 @@ Filter 1310 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1311 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} +Filter 1017 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-1016 inet6/filter/FORWARD -j limit-1016 @@ -15638,7 +13379,7 @@ Filter 1311 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1312 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} +Filter 1018 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-1017 inet6/filter/FORWARD -j limit-1017 @@ -15649,7 +13390,7 @@ Filter 1312 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-1017 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1017 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1313 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} +Filter 1019 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1018 inet6/filter/FORWARD -j limit-1018 @@ -15670,7 +13411,7 @@ Filter 1313 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-50 -j ACCEPT inet6/filter/logaccept-final-50 -j ACCEPT -Filter 1314 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} +Filter 1020 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1019 inet6/filter/FORWARD -j limit-1019 @@ -15683,7 +13424,7 @@ Filter 1314 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-1019 -m limit --limit 1/second -j LOG inet6/filter/limit-1019 -m limit --limit 1/second -j LOG -Filter 1315 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +Filter 1021 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1020 inet6/filter/FORWARD -j limit-1020 @@ -15700,7 +13441,7 @@ Filter 1315 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1316 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +Filter 1022 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1021 inet6/filter/FORWARD -j limit-1021 @@ -15711,7 +13452,7 @@ Filter 1316 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1317 {"flow-limit":{"interval":5,"log":"none","name":"C"}} +Filter 1023 {"flow-limit":{"interval":5,"log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-1022 inet6/filter/FORWARD -j limit-1022 @@ -15730,7 +13471,7 @@ Filter 1317 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1318 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"}} +Filter 1024 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-1023 inet6/filter/FORWARD -j limit-1023 @@ -15743,7 +13484,7 @@ Filter 1318 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-1023 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1319 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} +Filter 1025 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1024 inet6/filter/FORWARD -j limit-1024 @@ -15766,7 +13507,7 @@ Filter 1319 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/logaccept-final-51 -j ACCEPT inet6/filter/logaccept-final-51 -j ACCEPT -Filter 1320 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} +Filter 1026 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1025 inet6/filter/FORWARD -j limit-1025 @@ -15779,7 +13520,7 @@ Filter 1320 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-1025 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 1321 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} +Filter 1027 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1026 inet6/filter/FORWARD -j limit-1026 @@ -15798,7 +13539,7 @@ Filter 1321 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1322 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} +Filter 1028 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1027 inet6/filter/FORWARD -j limit-1027 @@ -15811,7 +13552,7 @@ Filter 1322 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-1027 -m recent --name user:C --rsource --mask fe00:: --set -Filter 1323 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false}} +Filter 1029 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-1028 inet6/filter/FORWARD -j limit-1028 @@ -15828,7 +13569,7 @@ Filter 1323 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1324 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false}} +Filter 1030 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-1029 inet6/filter/FORWARD -j limit-1029 @@ -15839,7 +13580,7 @@ Filter 1324 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-1029 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1029 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1325 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} +Filter 1031 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1030 inet6/filter/FORWARD -j limit-1030 @@ -15860,7 +13601,7 @@ Filter 1325 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/logaccept-final-52 -j ACCEPT inet6/filter/logaccept-final-52 -j ACCEPT -Filter 1326 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} +Filter 1032 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1031 inet6/filter/FORWARD -j limit-1031 @@ -15873,7 +13614,7 @@ Filter 1326 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-1031 -m limit --limit 1/second -j LOG inet6/filter/limit-1031 -m limit --limit 1/second -j LOG -Filter 1327 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} +Filter 1033 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1032 inet6/filter/FORWARD -j limit-1032 @@ -15890,7 +13631,7 @@ Filter 1327 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1328 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} +Filter 1034 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1033 inet6/filter/FORWARD -j limit-1033 @@ -15901,7 +13642,7 @@ Filter 1328 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-1033 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1033 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1329 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} +Filter 1035 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-1034 inet6/filter/FORWARD -j limit-1034 @@ -15920,7 +13661,7 @@ Filter 1329 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1330 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} +Filter 1036 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-1035 inet6/filter/FORWARD -j limit-1035 @@ -15933,7 +13674,7 @@ Filter 1330 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-1035 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1331 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} +Filter 1037 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1036 inet6/filter/FORWARD -j limit-1036 @@ -15956,7 +13697,7 @@ Filter 1331 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-53 -j ACCEPT inet6/filter/logaccept-final-53 -j ACCEPT -Filter 1332 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} +Filter 1038 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1037 inet6/filter/FORWARD -j limit-1037 @@ -15969,7 +13710,7 @@ Filter 1332 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-1037 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 1333 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} +Filter 1039 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1038 inet6/filter/FORWARD -j limit-1038 @@ -15988,7 +13729,7 @@ Filter 1333 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1334 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} +Filter 1040 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1039 inet6/filter/FORWARD -j limit-1039 @@ -16001,7 +13742,7 @@ Filter 1334 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-1039 -m recent --name user:C --rdest --mask fe00:: --set -Filter 1335 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} +Filter 1041 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-1040 inet6/filter/FORWARD -j limit-1040 @@ -16018,7 +13759,7 @@ Filter 1335 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1336 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} +Filter 1042 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-1041 inet6/filter/FORWARD -j limit-1041 @@ -16029,7 +13770,7 @@ Filter 1336 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-1041 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1041 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1337 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} +Filter 1043 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1042 inet6/filter/FORWARD -j limit-1042 @@ -16050,7 +13791,7 @@ Filter 1337 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-54 -j ACCEPT inet6/filter/logaccept-final-54 -j ACCEPT -Filter 1338 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} +Filter 1044 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1043 inet6/filter/FORWARD -j limit-1043 @@ -16063,7 +13804,7 @@ Filter 1338 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-1043 -m limit --limit 1/second -j LOG inet6/filter/limit-1043 -m limit --limit 1/second -j LOG -Filter 1339 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} +Filter 1045 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1044 inet6/filter/FORWARD -j limit-1044 @@ -16080,7 +13821,7 @@ Filter 1339 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1340 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} +Filter 1046 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1045 inet6/filter/FORWARD -j limit-1045 @@ -16091,7 +13832,7 @@ Filter 1340 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-1045 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1045 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 1341 {"flow-limit":150} +Filter 1047 {"flow-limit":150} (filter-limit) inet/filter/FORWARD -j limit-1046 inet6/filter/FORWARD -j limit-1046 @@ -16112,7 +13853,7 @@ Filter 1341 {"flow-limit":150} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1342 {"action":"pass","flow-limit":150} +Filter 1048 {"action":"pass","flow-limit":150} (filter-limit) inet/filter/FORWARD -j limit-1047 inet6/filter/FORWARD -j limit-1047 @@ -16127,7 +13868,7 @@ Filter 1342 {"action":"pass","flow-limit":150} inet/filter/limit-1047 -j DROP inet6/filter/limit-1047 -j DROP -Filter 1343 {"flow-limit":150,"log":true} +Filter 1049 {"flow-limit":150,"log":true} (filter-limit) inet/filter/FORWARD -j limit-1048 inet6/filter/FORWARD -j limit-1048 @@ -16152,7 +13893,7 @@ Filter 1343 {"flow-limit":150,"log":true} inet/filter/logaccept-final-55 -j ACCEPT inet6/filter/logaccept-final-55 -j ACCEPT -Filter 1344 {"flow-limit":150,"log":"none"} +Filter 1050 {"flow-limit":150,"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1049 inet6/filter/FORWARD -j limit-1049 @@ -16173,7 +13914,7 @@ Filter 1344 {"flow-limit":150,"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1345 {"flow-limit":{"count":150}} +Filter 1051 {"flow-limit":{"count":150}} (filter-limit) inet/filter/FORWARD -j limit-1050 inet6/filter/FORWARD -j limit-1050 @@ -16194,7 +13935,7 @@ Filter 1345 {"flow-limit":{"count":150}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1346 {"action":"pass","flow-limit":{"count":150}} +Filter 1052 {"action":"pass","flow-limit":{"count":150}} (filter-limit) inet/filter/FORWARD -j limit-1051 inet6/filter/FORWARD -j limit-1051 @@ -16209,7 +13950,7 @@ Filter 1346 {"action":"pass","flow-limit":{"count":150}} inet/filter/limit-1051 -j DROP inet6/filter/limit-1051 -j DROP -Filter 1347 {"flow-limit":{"count":150},"log":true} +Filter 1053 {"flow-limit":{"count":150},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1052 inet6/filter/FORWARD -j limit-1052 @@ -16234,7 +13975,7 @@ Filter 1347 {"flow-limit":{"count":150},"log":true} inet/filter/logaccept-final-56 -j ACCEPT inet6/filter/logaccept-final-56 -j ACCEPT -Filter 1348 {"flow-limit":{"count":150},"log":"none"} +Filter 1054 {"flow-limit":{"count":150},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1053 inet6/filter/FORWARD -j limit-1053 @@ -16255,7 +13996,7 @@ Filter 1348 {"flow-limit":{"count":150},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1349 {"flow-limit":{"count":150,"log":false}} +Filter 1055 {"flow-limit":{"count":150,"log":false}} (filter-limit) inet/filter/FORWARD -j limit-1054 inet6/filter/FORWARD -j limit-1054 @@ -16274,7 +14015,7 @@ Filter 1349 {"flow-limit":{"count":150,"log":false}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1350 {"action":"pass","flow-limit":{"count":150,"log":false}} +Filter 1056 {"action":"pass","flow-limit":{"count":150,"log":false}} (filter-limit) inet/filter/FORWARD -j limit-1055 inet6/filter/FORWARD -j limit-1055 @@ -16287,7 +14028,7 @@ Filter 1350 {"action":"pass","flow-limit":{"count":150,"l inet/filter/limit-1055 -j DROP inet6/filter/limit-1055 -j DROP -Filter 1351 {"flow-limit":{"count":150,"log":false},"log":true} +Filter 1057 {"flow-limit":{"count":150,"log":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1056 inet6/filter/FORWARD -j limit-1056 @@ -16310,7 +14051,7 @@ Filter 1351 {"flow-limit":{"count":150,"log":false},"log" inet/filter/logaccept-final-57 -j ACCEPT inet6/filter/logaccept-final-57 -j ACCEPT -Filter 1352 {"flow-limit":{"count":150,"log":false},"log":"none"} +Filter 1058 {"flow-limit":{"count":150,"log":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1057 inet6/filter/FORWARD -j limit-1057 @@ -16329,7 +14070,7 @@ Filter 1352 {"flow-limit":{"count":150,"log":false},"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1353 {"flow-limit":{"count":150,"log":"none"}} +Filter 1059 {"flow-limit":{"count":150,"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-1058 inet6/filter/FORWARD -j limit-1058 @@ -16348,7 +14089,7 @@ Filter 1353 {"flow-limit":{"count":150,"log":"none"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1354 {"action":"pass","flow-limit":{"count":150,"log":"none"}} +Filter 1060 {"action":"pass","flow-limit":{"count":150,"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-1059 inet6/filter/FORWARD -j limit-1059 @@ -16361,7 +14102,7 @@ Filter 1354 {"action":"pass","flow-limit":{"count":150,"l inet/filter/limit-1059 -j DROP inet6/filter/limit-1059 -j DROP -Filter 1355 {"flow-limit":{"count":150,"log":"none"},"log":true} +Filter 1061 {"flow-limit":{"count":150,"log":"none"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1060 inet6/filter/FORWARD -j limit-1060 @@ -16384,7 +14125,7 @@ Filter 1355 {"flow-limit":{"count":150,"log":"none"},"log inet/filter/logaccept-final-58 -j ACCEPT inet6/filter/logaccept-final-58 -j ACCEPT -Filter 1356 {"flow-limit":{"count":150,"log":"none"},"log":"none"} +Filter 1062 {"flow-limit":{"count":150,"log":"none"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1061 inet6/filter/FORWARD -j limit-1061 @@ -16403,7 +14144,7 @@ Filter 1356 {"flow-limit":{"count":150,"log":"none"},"log inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1357 {"flow-limit":{"count":150,"interval":5}} +Filter 1063 {"flow-limit":{"count":150,"interval":5}} (filter-limit) inet/filter/FORWARD -j limit-1062 inet6/filter/FORWARD -j limit-1062 @@ -16424,7 +14165,7 @@ Filter 1357 {"flow-limit":{"count":150,"interval":5}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1358 {"action":"pass","flow-limit":{"count":150,"interval":5}} +Filter 1064 {"action":"pass","flow-limit":{"count":150,"interval":5}} (filter-limit) inet/filter/FORWARD -j limit-1063 inet6/filter/FORWARD -j limit-1063 @@ -16439,7 +14180,7 @@ Filter 1358 {"action":"pass","flow-limit":{"count":150,"i inet/filter/limit-1063 -j DROP inet6/filter/limit-1063 -j DROP -Filter 1359 {"flow-limit":{"count":150,"interval":5},"log":true} +Filter 1065 {"flow-limit":{"count":150,"interval":5},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1064 inet6/filter/FORWARD -j limit-1064 @@ -16464,7 +14205,7 @@ Filter 1359 {"flow-limit":{"count":150,"interval":5},"log inet/filter/logaccept-final-59 -j ACCEPT inet6/filter/logaccept-final-59 -j ACCEPT -Filter 1360 {"flow-limit":{"count":150,"interval":5},"log":"none"} +Filter 1066 {"flow-limit":{"count":150,"interval":5},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1065 inet6/filter/FORWARD -j limit-1065 @@ -16485,7 +14226,7 @@ Filter 1360 {"flow-limit":{"count":150,"interval":5},"log inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1361 {"flow-limit":{"count":150,"interval":5,"log":false}} +Filter 1067 {"flow-limit":{"count":150,"interval":5,"log":false}} (filter-limit) inet/filter/FORWARD -j limit-1066 inet6/filter/FORWARD -j limit-1066 @@ -16504,7 +14245,7 @@ Filter 1361 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1362 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false}} +Filter 1068 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false}} (filter-limit) inet/filter/FORWARD -j limit-1067 inet6/filter/FORWARD -j limit-1067 @@ -16517,7 +14258,7 @@ Filter 1362 {"action":"pass","flow-limit":{"count":150,"i inet/filter/limit-1067 -j DROP inet6/filter/limit-1067 -j DROP -Filter 1363 {"flow-limit":{"count":150,"interval":5,"log":false},"log":true} +Filter 1069 {"flow-limit":{"count":150,"interval":5,"log":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1068 inet6/filter/FORWARD -j limit-1068 @@ -16540,7 +14281,7 @@ Filter 1363 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/logaccept-final-60 -j ACCEPT inet6/filter/logaccept-final-60 -j ACCEPT -Filter 1364 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"none"} +Filter 1070 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1069 inet6/filter/FORWARD -j limit-1069 @@ -16559,7 +14300,7 @@ Filter 1364 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1365 {"flow-limit":{"count":150,"interval":5,"log":"none"}} +Filter 1071 {"flow-limit":{"count":150,"interval":5,"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-1070 inet6/filter/FORWARD -j limit-1070 @@ -16578,7 +14319,7 @@ Filter 1365 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1366 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"}} +Filter 1072 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-1071 inet6/filter/FORWARD -j limit-1071 @@ -16591,7 +14332,7 @@ Filter 1366 {"action":"pass","flow-limit":{"count":150,"i inet/filter/limit-1071 -j DROP inet6/filter/limit-1071 -j DROP -Filter 1367 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":true} +Filter 1073 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1072 inet6/filter/FORWARD -j limit-1072 @@ -16614,7 +14355,7 @@ Filter 1367 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/logaccept-final-61 -j ACCEPT inet6/filter/logaccept-final-61 -j ACCEPT -Filter 1368 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"none"} +Filter 1074 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1073 inet6/filter/FORWARD -j limit-1073 @@ -16633,16 +14374,16 @@ Filter 1368 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1369 {"flow-limit":1,"in":"A","no-track":true,"out":"_fw"} +Filter 1075 {"flow-limit":1,"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1074 inet6/filter/INPUT -i eth0 -j limit-1074 - inet/filter/limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-343 - inet6/filter/limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-343 - inet/filter/logdrop-343 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-343 -m limit --limit 1/second -j LOG - inet/filter/logdrop-343 -j DROP - inet6/filter/logdrop-343 -j DROP + inet/filter/limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-342 + inet6/filter/limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-342 + inet/filter/logdrop-342 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-342 -m limit --limit 1/second -j LOG + inet/filter/logdrop-342 -j DROP + inet6/filter/logdrop-342 -j DROP inet/filter/limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -16652,31 +14393,31 @@ Filter 1369 {"flow-limit":1,"in":"A","no-track":true,"out inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1370 {"action":"pass","flow-limit":1,"in":"A","no-track":true,"out":"_fw"} +Filter 1076 {"action":"pass","flow-limit":1,"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1075 inet6/filter/INPUT -i eth0 -j limit-1075 - inet/filter/limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-344 - inet6/filter/limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-344 - inet/filter/logdrop-344 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-344 -m limit --limit 1/second -j LOG - inet/filter/logdrop-344 -j DROP - inet6/filter/logdrop-344 -j DROP + inet/filter/limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-343 + inet6/filter/limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-343 + inet/filter/logdrop-343 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-343 -m limit --limit 1/second -j LOG + inet/filter/logdrop-343 -j DROP + inet6/filter/logdrop-343 -j DROP inet/filter/limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --set inet6/filter/limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1371 {"flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1077 {"flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1076 inet6/filter/INPUT -i eth0 -j limit-1076 - inet/filter/limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-345 - inet6/filter/limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-345 - inet/filter/logdrop-345 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-345 -m limit --limit 1/second -j LOG - inet/filter/logdrop-345 -j DROP - inet6/filter/logdrop-345 -j DROP + inet/filter/limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-344 + inet6/filter/limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-344 + inet/filter/logdrop-344 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-344 -m limit --limit 1/second -j LOG + inet/filter/logdrop-344 -j DROP + inet6/filter/logdrop-344 -j DROP inet/filter/limit-1076 -m limit --limit 1/second -j LOG inet6/filter/limit-1076 -m limit --limit 1/second -j LOG inet/filter/limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -16688,31 +14429,31 @@ Filter 1371 {"flow-limit":1,"in":"A","log":true,"no-track inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1372 {"action":"pass","flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1078 {"action":"pass","flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1077 inet6/filter/INPUT -i eth0 -j limit-1077 - inet/filter/limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-346 - inet6/filter/limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-346 - inet/filter/logdrop-346 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-346 -m limit --limit 1/second -j LOG - inet/filter/logdrop-346 -j DROP - inet6/filter/logdrop-346 -j DROP + inet/filter/limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-345 + inet6/filter/limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-345 + inet/filter/logdrop-345 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-345 -m limit --limit 1/second -j LOG + inet/filter/logdrop-345 -j DROP + inet6/filter/logdrop-345 -j DROP inet/filter/limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1373 {"flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1079 {"flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1078 inet6/filter/INPUT -i eth0 -j limit-1078 - inet/filter/limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-347 - inet6/filter/limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-347 - inet/filter/logdrop-347 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-347 -m limit --limit 1/second -j LOG - inet/filter/logdrop-347 -j DROP - inet6/filter/logdrop-347 -j DROP + inet/filter/limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-346 + inet6/filter/limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-346 + inet/filter/logdrop-346 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-346 -m limit --limit 1/second -j LOG + inet/filter/logdrop-346 -j DROP + inet6/filter/logdrop-346 -j DROP inet/filter/limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -16722,31 +14463,31 @@ Filter 1373 {"flow-limit":1,"in":"A","log":"none","no-tra inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1374 {"action":"pass","flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1080 {"action":"pass","flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1079 inet6/filter/INPUT -i eth0 -j limit-1079 - inet/filter/limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-348 - inet6/filter/limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-348 - inet/filter/logdrop-348 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-348 -m limit --limit 1/second -j LOG - inet/filter/logdrop-348 -j DROP - inet6/filter/logdrop-348 -j DROP + inet/filter/limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-347 + inet6/filter/limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-347 + inet/filter/logdrop-347 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-347 -m limit --limit 1/second -j LOG + inet/filter/logdrop-347 -j DROP + inet6/filter/logdrop-347 -j DROP inet/filter/limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --set inet6/filter/limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1375 {"flow-limit":{},"in":"A","no-track":true,"out":"_fw"} +Filter 1081 {"flow-limit":{},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1080 inet6/filter/INPUT -i eth0 -j limit-1080 - inet/filter/limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-349 - inet6/filter/limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-349 - inet/filter/logdrop-349 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-349 -m limit --limit 1/second -j LOG - inet/filter/logdrop-349 -j DROP - inet6/filter/logdrop-349 -j DROP + inet/filter/limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-348 + inet6/filter/limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-348 + inet/filter/logdrop-348 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-348 -m limit --limit 1/second -j LOG + inet/filter/logdrop-348 -j DROP + inet6/filter/logdrop-348 -j DROP inet/filter/limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -16756,31 +14497,31 @@ Filter 1375 {"flow-limit":{},"in":"A","no-track":true,"ou inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1376 {"action":"pass","flow-limit":{},"in":"A","no-track":true,"out":"_fw"} +Filter 1082 {"action":"pass","flow-limit":{},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1081 inet6/filter/INPUT -i eth0 -j limit-1081 - inet/filter/limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-350 - inet6/filter/limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-350 - inet/filter/logdrop-350 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-350 -m limit --limit 1/second -j LOG - inet/filter/logdrop-350 -j DROP - inet6/filter/logdrop-350 -j DROP + inet/filter/limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-349 + inet6/filter/limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-349 + inet/filter/logdrop-349 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-349 -m limit --limit 1/second -j LOG + inet/filter/logdrop-349 -j DROP + inet6/filter/logdrop-349 -j DROP inet/filter/limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set inet6/filter/limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1377 {"flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1083 {"flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1082 inet6/filter/INPUT -i eth0 -j limit-1082 - inet/filter/limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-351 - inet6/filter/limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-351 - inet/filter/logdrop-351 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-351 -m limit --limit 1/second -j LOG - inet/filter/logdrop-351 -j DROP - inet6/filter/logdrop-351 -j DROP + inet/filter/limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-350 + inet6/filter/limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-350 + inet/filter/logdrop-350 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-350 -m limit --limit 1/second -j LOG + inet/filter/logdrop-350 -j DROP + inet6/filter/logdrop-350 -j DROP inet/filter/limit-1082 -m limit --limit 1/second -j LOG inet6/filter/limit-1082 -m limit --limit 1/second -j LOG inet/filter/limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -16792,31 +14533,31 @@ Filter 1377 {"flow-limit":{},"in":"A","log":true,"no-trac inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1378 {"action":"pass","flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1084 {"action":"pass","flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1083 inet6/filter/INPUT -i eth0 -j limit-1083 - inet/filter/limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-352 - inet6/filter/limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-352 - inet/filter/logdrop-352 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-352 -m limit --limit 1/second -j LOG - inet/filter/logdrop-352 -j DROP - inet6/filter/logdrop-352 -j DROP + inet/filter/limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-351 + inet6/filter/limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-351 + inet/filter/logdrop-351 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-351 -m limit --limit 1/second -j LOG + inet/filter/logdrop-351 -j DROP + inet6/filter/logdrop-351 -j DROP inet/filter/limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1379 {"flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1085 {"flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1084 inet6/filter/INPUT -i eth0 -j limit-1084 - inet/filter/limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-353 - inet6/filter/limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-353 - inet/filter/logdrop-353 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-353 -m limit --limit 1/second -j LOG - inet/filter/logdrop-353 -j DROP - inet6/filter/logdrop-353 -j DROP + inet/filter/limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-352 + inet6/filter/limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-352 + inet/filter/logdrop-352 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-352 -m limit --limit 1/second -j LOG + inet/filter/logdrop-352 -j DROP + inet6/filter/logdrop-352 -j DROP inet/filter/limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -16826,31 +14567,31 @@ Filter 1379 {"flow-limit":{},"in":"A","log":"none","no-tr inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1380 {"action":"pass","flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1086 {"action":"pass","flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1085 inet6/filter/INPUT -i eth0 -j limit-1085 - inet/filter/limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-354 - inet6/filter/limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-354 - inet/filter/logdrop-354 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-354 -m limit --limit 1/second -j LOG - inet/filter/logdrop-354 -j DROP - inet6/filter/logdrop-354 -j DROP + inet/filter/limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-353 + inet6/filter/limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-353 + inet/filter/logdrop-353 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-353 -m limit --limit 1/second -j LOG + inet/filter/logdrop-353 -j DROP + inet6/filter/logdrop-353 -j DROP inet/filter/limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --set inet6/filter/limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1381 {"flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1087 {"flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1086 inet6/filter/INPUT -i eth0 -j limit-1086 - inet/filter/limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-355 - inet6/filter/limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-355 - inet/filter/logdrop-355 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-355 -m limit --limit 1/second -j LOG - inet/filter/logdrop-355 -j DROP - inet6/filter/logdrop-355 -j DROP + inet/filter/limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-354 + inet6/filter/limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-354 + inet/filter/logdrop-354 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-354 -m limit --limit 1/second -j LOG + inet/filter/logdrop-354 -j DROP + inet6/filter/logdrop-354 -j DROP inet/filter/limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -16860,31 +14601,31 @@ Filter 1381 {"flow-limit":{"name":"A"},"in":"A","no-track inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1382 {"action":"pass","flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1088 {"action":"pass","flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1087 inet6/filter/INPUT -i eth0 -j limit-1087 - inet/filter/limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-356 - inet6/filter/limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-356 - inet/filter/logdrop-356 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-356 -m limit --limit 1/second -j LOG - inet/filter/logdrop-356 -j DROP - inet6/filter/logdrop-356 -j DROP + inet/filter/limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-355 + inet6/filter/limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-355 + inet/filter/logdrop-355 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-355 -m limit --limit 1/second -j LOG + inet/filter/logdrop-355 -j DROP + inet6/filter/logdrop-355 -j DROP inet/filter/limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1383 {"flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1089 {"flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1088 inet6/filter/INPUT -i eth0 -j limit-1088 - inet/filter/limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-357 - inet6/filter/limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-357 - inet/filter/logdrop-357 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-357 -m limit --limit 1/second -j LOG - inet/filter/logdrop-357 -j DROP - inet6/filter/logdrop-357 -j DROP + inet/filter/limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-356 + inet6/filter/limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-356 + inet/filter/logdrop-356 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-356 -m limit --limit 1/second -j LOG + inet/filter/logdrop-356 -j DROP + inet6/filter/logdrop-356 -j DROP inet/filter/limit-1088 -m limit --limit 1/second -j LOG inet6/filter/limit-1088 -m limit --limit 1/second -j LOG inet/filter/limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -16896,31 +14637,31 @@ Filter 1383 {"flow-limit":{"name":"A"},"in":"A","log":tru inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1384 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1090 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1089 inet6/filter/INPUT -i eth0 -j limit-1089 - inet/filter/limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-358 - inet6/filter/limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-358 - inet/filter/logdrop-358 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-358 -m limit --limit 1/second -j LOG - inet/filter/logdrop-358 -j DROP - inet6/filter/logdrop-358 -j DROP + inet/filter/limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-357 + inet6/filter/limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-357 + inet/filter/logdrop-357 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-357 -m limit --limit 1/second -j LOG + inet/filter/logdrop-357 -j DROP + inet6/filter/logdrop-357 -j DROP inet/filter/limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1385 {"flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1091 {"flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1090 inet6/filter/INPUT -i eth0 -j limit-1090 - inet/filter/limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-359 - inet6/filter/limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-359 - inet/filter/logdrop-359 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-359 -m limit --limit 1/second -j LOG - inet/filter/logdrop-359 -j DROP - inet6/filter/logdrop-359 -j DROP + inet/filter/limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-358 + inet6/filter/limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-358 + inet/filter/logdrop-358 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-358 -m limit --limit 1/second -j LOG + inet/filter/logdrop-358 -j DROP + inet6/filter/logdrop-358 -j DROP inet/filter/limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -16930,31 +14671,31 @@ Filter 1385 {"flow-limit":{"name":"A"},"in":"A","log":"no inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1386 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1092 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1091 inet6/filter/INPUT -i eth0 -j limit-1091 - inet/filter/limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-360 - inet6/filter/limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-360 - inet/filter/logdrop-360 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-360 -m limit --limit 1/second -j LOG - inet/filter/logdrop-360 -j DROP - inet6/filter/logdrop-360 -j DROP + inet/filter/limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-359 + inet6/filter/limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-359 + inet/filter/logdrop-359 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-359 -m limit --limit 1/second -j LOG + inet/filter/logdrop-359 -j DROP + inet6/filter/logdrop-359 -j DROP inet/filter/limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1387 {"flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1093 {"flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1092 inet6/filter/INPUT -i eth0 -j limit-1092 - inet/filter/limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-361 - inet6/filter/limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-361 - inet/filter/logdrop-361 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-361 -m limit --limit 1/second -j LOG - inet/filter/logdrop-361 -j DROP - inet6/filter/logdrop-361 -j DROP + inet/filter/limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-360 + inet6/filter/limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-360 + inet/filter/logdrop-360 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-360 -m limit --limit 1/second -j LOG + inet/filter/logdrop-360 -j DROP + inet6/filter/logdrop-360 -j DROP inet/filter/limit-1092 -j ACCEPT inet6/filter/limit-1092 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -16964,27 +14705,27 @@ Filter 1387 {"flow-limit":{"name":"A","update":false},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1388 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1094 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-362 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-362 - inet/filter/logdrop-362 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-362 -m limit --limit 1/second -j LOG - inet/filter/logdrop-362 -j DROP - inet6/filter/logdrop-362 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-361 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-361 + inet/filter/logdrop-361 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-361 -m limit --limit 1/second -j LOG + inet/filter/logdrop-361 -j DROP + inet6/filter/logdrop-361 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1389 {"flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1095 {"flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1094 inet6/filter/INPUT -i eth0 -j limit-1094 - inet/filter/limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-363 - inet6/filter/limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-363 - inet/filter/logdrop-363 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-363 -m limit --limit 1/second -j LOG - inet/filter/logdrop-363 -j DROP - inet6/filter/logdrop-363 -j DROP + inet/filter/limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-362 + inet6/filter/limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-362 + inet/filter/logdrop-362 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-362 -m limit --limit 1/second -j LOG + inet/filter/logdrop-362 -j DROP + inet6/filter/logdrop-362 -j DROP inet/filter/limit-1094 -m limit --limit 1/second -j LOG inet6/filter/limit-1094 -m limit --limit 1/second -j LOG inet/filter/limit-1094 -j ACCEPT @@ -16996,31 +14737,31 @@ Filter 1389 {"flow-limit":{"name":"A","update":false},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1390 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1096 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1095 inet6/filter/INPUT -i eth0 -j limit-1095 - inet/filter/limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-364 - inet6/filter/limit-1095 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-364 - inet/filter/logdrop-364 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-364 -m limit --limit 1/second -j LOG - inet/filter/logdrop-364 -j DROP - inet6/filter/logdrop-364 -j DROP + inet/filter/limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-363 + inet6/filter/limit-1095 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-363 + inet/filter/logdrop-363 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-363 -m limit --limit 1/second -j LOG + inet/filter/logdrop-363 -j DROP + inet6/filter/logdrop-363 -j DROP inet/filter/limit-1095 -m limit --limit 1/second -j LOG inet6/filter/limit-1095 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1391 {"flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1097 {"flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1096 inet6/filter/INPUT -i eth0 -j limit-1096 - inet/filter/limit-1096 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-365 - inet6/filter/limit-1096 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-365 - inet/filter/logdrop-365 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-365 -m limit --limit 1/second -j LOG - inet/filter/logdrop-365 -j DROP - inet6/filter/logdrop-365 -j DROP + inet/filter/limit-1096 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-364 + inet6/filter/limit-1096 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-364 + inet/filter/logdrop-364 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-364 -m limit --limit 1/second -j LOG + inet/filter/logdrop-364 -j DROP + inet6/filter/logdrop-364 -j DROP inet/filter/limit-1096 -j ACCEPT inet6/filter/limit-1096 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -17030,27 +14771,27 @@ Filter 1391 {"flow-limit":{"name":"A","update":false},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1392 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1098 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-366 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-366 - inet/filter/logdrop-366 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-366 -m limit --limit 1/second -j LOG - inet/filter/logdrop-366 -j DROP - inet6/filter/logdrop-366 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-365 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-365 + inet/filter/logdrop-365 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-365 -m limit --limit 1/second -j LOG + inet/filter/logdrop-365 -j DROP + inet6/filter/logdrop-365 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1393 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1099 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1098 inet6/filter/INPUT -i eth0 -j limit-1098 - inet/filter/limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-367 - inet6/filter/limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-367 - inet/filter/logdrop-367 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-367 -m limit --limit 1/second -j LOG - inet/filter/logdrop-367 -j DROP - inet6/filter/logdrop-367 -j DROP + inet/filter/limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-366 + inet6/filter/limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-366 + inet/filter/logdrop-366 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-366 -m limit --limit 1/second -j LOG + inet/filter/logdrop-366 -j DROP + inet6/filter/logdrop-366 -j DROP inet/filter/limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -17060,31 +14801,31 @@ Filter 1393 {"flow-limit":{"addr":"dest","name":"A"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1394 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1100 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1099 inet6/filter/INPUT -i eth0 -j limit-1099 - inet/filter/limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-368 - inet6/filter/limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-368 - inet/filter/logdrop-368 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-368 -m limit --limit 1/second -j LOG - inet/filter/logdrop-368 -j DROP - inet6/filter/logdrop-368 -j DROP + inet/filter/limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-367 + inet6/filter/limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-367 + inet/filter/logdrop-367 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-367 -m limit --limit 1/second -j LOG + inet/filter/logdrop-367 -j DROP + inet6/filter/logdrop-367 -j DROP inet/filter/limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1395 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1101 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1100 inet6/filter/INPUT -i eth0 -j limit-1100 - inet/filter/limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-369 - inet6/filter/limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-369 - inet/filter/logdrop-369 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-369 -m limit --limit 1/second -j LOG - inet/filter/logdrop-369 -j DROP - inet6/filter/logdrop-369 -j DROP + inet/filter/limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-368 + inet6/filter/limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-368 + inet/filter/logdrop-368 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-368 -m limit --limit 1/second -j LOG + inet/filter/logdrop-368 -j DROP + inet6/filter/logdrop-368 -j DROP inet/filter/limit-1100 -m limit --limit 1/second -j LOG inet6/filter/limit-1100 -m limit --limit 1/second -j LOG inet/filter/limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT @@ -17096,31 +14837,31 @@ Filter 1395 {"flow-limit":{"addr":"dest","name":"A"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1396 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1102 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1101 inet6/filter/INPUT -i eth0 -j limit-1101 - inet/filter/limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-370 - inet6/filter/limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-370 - inet/filter/logdrop-370 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-370 -m limit --limit 1/second -j LOG - inet/filter/logdrop-370 -j DROP - inet6/filter/logdrop-370 -j DROP + inet/filter/limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-369 + inet6/filter/limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-369 + inet/filter/logdrop-369 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-369 -m limit --limit 1/second -j LOG + inet/filter/logdrop-369 -j DROP + inet6/filter/logdrop-369 -j DROP inet/filter/limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1397 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1103 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1102 inet6/filter/INPUT -i eth0 -j limit-1102 - inet/filter/limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-371 - inet6/filter/limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-371 - inet/filter/logdrop-371 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-371 -m limit --limit 1/second -j LOG - inet/filter/logdrop-371 -j DROP - inet6/filter/logdrop-371 -j DROP + inet/filter/limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-370 + inet6/filter/limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-370 + inet/filter/logdrop-370 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-370 -m limit --limit 1/second -j LOG + inet/filter/logdrop-370 -j DROP + inet6/filter/logdrop-370 -j DROP inet/filter/limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -17130,31 +14871,31 @@ Filter 1397 {"flow-limit":{"addr":"dest","name":"A"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1398 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1104 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1103 inet6/filter/INPUT -i eth0 -j limit-1103 - inet/filter/limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-372 - inet6/filter/limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-372 - inet/filter/logdrop-372 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-372 -m limit --limit 1/second -j LOG - inet/filter/logdrop-372 -j DROP - inet6/filter/logdrop-372 -j DROP + inet/filter/limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-371 + inet6/filter/limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-371 + inet/filter/logdrop-371 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-371 -m limit --limit 1/second -j LOG + inet/filter/logdrop-371 -j DROP + inet6/filter/logdrop-371 -j DROP inet/filter/limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1399 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1105 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1104 inet6/filter/INPUT -i eth0 -j limit-1104 - inet/filter/limit-1104 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-373 - inet6/filter/limit-1104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-373 - inet/filter/logdrop-373 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-373 -m limit --limit 1/second -j LOG - inet/filter/logdrop-373 -j DROP - inet6/filter/logdrop-373 -j DROP + inet/filter/limit-1104 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-372 + inet6/filter/limit-1104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-372 + inet/filter/logdrop-372 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-372 -m limit --limit 1/second -j LOG + inet/filter/logdrop-372 -j DROP + inet6/filter/logdrop-372 -j DROP inet/filter/limit-1104 -j ACCEPT inet6/filter/limit-1104 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -17164,27 +14905,27 @@ Filter 1399 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1400 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1106 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-374 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-374 - inet/filter/logdrop-374 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-374 -m limit --limit 1/second -j LOG - inet/filter/logdrop-374 -j DROP - inet6/filter/logdrop-374 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-373 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-373 + inet/filter/logdrop-373 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-373 -m limit --limit 1/second -j LOG + inet/filter/logdrop-373 -j DROP + inet6/filter/logdrop-373 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1401 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1107 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1106 inet6/filter/INPUT -i eth0 -j limit-1106 - inet/filter/limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-375 - inet6/filter/limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-375 - inet/filter/logdrop-375 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-375 -m limit --limit 1/second -j LOG - inet/filter/logdrop-375 -j DROP - inet6/filter/logdrop-375 -j DROP + inet/filter/limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-374 + inet6/filter/limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-374 + inet/filter/logdrop-374 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-374 -m limit --limit 1/second -j LOG + inet/filter/logdrop-374 -j DROP + inet6/filter/logdrop-374 -j DROP inet/filter/limit-1106 -m limit --limit 1/second -j LOG inet6/filter/limit-1106 -m limit --limit 1/second -j LOG inet/filter/limit-1106 -j ACCEPT @@ -17196,31 +14937,31 @@ Filter 1401 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1402 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1108 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1107 inet6/filter/INPUT -i eth0 -j limit-1107 - inet/filter/limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-376 - inet6/filter/limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-376 - inet/filter/logdrop-376 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-376 -m limit --limit 1/second -j LOG - inet/filter/logdrop-376 -j DROP - inet6/filter/logdrop-376 -j DROP + inet/filter/limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-375 + inet6/filter/limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-375 + inet/filter/logdrop-375 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-375 -m limit --limit 1/second -j LOG + inet/filter/logdrop-375 -j DROP + inet6/filter/logdrop-375 -j DROP inet/filter/limit-1107 -m limit --limit 1/second -j LOG inet6/filter/limit-1107 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1403 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1109 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1108 inet6/filter/INPUT -i eth0 -j limit-1108 - inet/filter/limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-377 - inet6/filter/limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-377 - inet/filter/logdrop-377 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-377 -m limit --limit 1/second -j LOG - inet/filter/logdrop-377 -j DROP - inet6/filter/logdrop-377 -j DROP + inet/filter/limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-376 + inet6/filter/limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-376 + inet/filter/logdrop-376 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-376 -m limit --limit 1/second -j LOG + inet/filter/logdrop-376 -j DROP + inet6/filter/logdrop-376 -j DROP inet/filter/limit-1108 -j ACCEPT inet6/filter/limit-1108 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -17230,27 +14971,27 @@ Filter 1403 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1404 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1110 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-378 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-378 - inet/filter/logdrop-378 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-378 -m limit --limit 1/second -j LOG - inet/filter/logdrop-378 -j DROP - inet6/filter/logdrop-378 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-377 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-377 + inet/filter/logdrop-377 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-377 -m limit --limit 1/second -j LOG + inet/filter/logdrop-377 -j DROP + inet6/filter/logdrop-377 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1405 {"flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1111 {"flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1110 inet6/filter/INPUT -i eth0 -j limit-1110 - inet/filter/limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-379 - inet6/filter/limit-1110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-379 - inet/filter/logdrop-379 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-379 -m limit --limit 1/second -j LOG - inet/filter/logdrop-379 -j DROP - inet6/filter/logdrop-379 -j DROP + inet/filter/limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-378 + inet6/filter/limit-1110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-378 + inet/filter/logdrop-378 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-378 -m limit --limit 1/second -j LOG + inet/filter/logdrop-378 -j DROP + inet6/filter/logdrop-378 -j DROP inet/filter/limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-1110 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -17260,31 +15001,31 @@ Filter 1405 {"flow-limit":{"name":"C"},"in":"A","no-track inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1406 {"action":"pass","flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1112 {"action":"pass","flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1111 inet6/filter/INPUT -i eth0 -j limit-1111 - inet/filter/limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-380 - inet6/filter/limit-1111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-380 - inet/filter/logdrop-380 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-380 -m limit --limit 1/second -j LOG - inet/filter/logdrop-380 -j DROP - inet6/filter/logdrop-380 -j DROP + inet/filter/limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-379 + inet6/filter/limit-1111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-379 + inet/filter/logdrop-379 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-379 -m limit --limit 1/second -j LOG + inet/filter/logdrop-379 -j DROP + inet6/filter/logdrop-379 -j DROP inet/filter/limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-1111 -m recent --name user:C --rsource --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1407 {"flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1113 {"flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1112 inet6/filter/INPUT -i eth0 -j limit-1112 - inet/filter/limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-381 - inet6/filter/limit-1112 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-381 - inet/filter/logdrop-381 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-381 -m limit --limit 1/second -j LOG - inet/filter/logdrop-381 -j DROP - inet6/filter/logdrop-381 -j DROP + inet/filter/limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-380 + inet6/filter/limit-1112 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-380 + inet/filter/logdrop-380 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-380 -m limit --limit 1/second -j LOG + inet/filter/logdrop-380 -j DROP + inet6/filter/logdrop-380 -j DROP inet/filter/limit-1112 -m limit --limit 1/second -j LOG inet6/filter/limit-1112 -m limit --limit 1/second -j LOG inet/filter/limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT @@ -17296,31 +15037,31 @@ Filter 1407 {"flow-limit":{"name":"C"},"in":"A","log":tru inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1408 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1114 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1113 inet6/filter/INPUT -i eth0 -j limit-1113 - inet/filter/limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-382 - inet6/filter/limit-1113 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-382 - inet/filter/logdrop-382 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-382 -m limit --limit 1/second -j LOG - inet/filter/logdrop-382 -j DROP - inet6/filter/logdrop-382 -j DROP + inet/filter/limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-381 + inet6/filter/limit-1113 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-381 + inet/filter/logdrop-381 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-381 -m limit --limit 1/second -j LOG + inet/filter/logdrop-381 -j DROP + inet6/filter/logdrop-381 -j DROP inet/filter/limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-1113 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1409 {"flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1115 {"flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1114 inet6/filter/INPUT -i eth0 -j limit-1114 - inet/filter/limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-383 - inet6/filter/limit-1114 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-383 - inet/filter/logdrop-383 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-383 -m limit --limit 1/second -j LOG - inet/filter/logdrop-383 -j DROP - inet6/filter/logdrop-383 -j DROP + inet/filter/limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-382 + inet6/filter/limit-1114 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-382 + inet/filter/logdrop-382 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-382 -m limit --limit 1/second -j LOG + inet/filter/logdrop-382 -j DROP + inet6/filter/logdrop-382 -j DROP inet/filter/limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-1114 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -17330,31 +15071,31 @@ Filter 1409 {"flow-limit":{"name":"C"},"in":"A","log":"no inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1410 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1116 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1115 inet6/filter/INPUT -i eth0 -j limit-1115 - inet/filter/limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-384 - inet6/filter/limit-1115 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-384 - inet/filter/logdrop-384 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-384 -m limit --limit 1/second -j LOG - inet/filter/logdrop-384 -j DROP - inet6/filter/logdrop-384 -j DROP + inet/filter/limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-383 + inet6/filter/limit-1115 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-383 + inet/filter/logdrop-383 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-383 -m limit --limit 1/second -j LOG + inet/filter/logdrop-383 -j DROP + inet6/filter/logdrop-383 -j DROP inet/filter/limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-1115 -m recent --name user:C --rsource --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1411 {"flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1117 {"flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1116 inet6/filter/INPUT -i eth0 -j limit-1116 - inet/filter/limit-1116 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-385 - inet6/filter/limit-1116 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-385 - inet/filter/logdrop-385 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-385 -m limit --limit 1/second -j LOG - inet/filter/logdrop-385 -j DROP - inet6/filter/logdrop-385 -j DROP + inet/filter/limit-1116 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-384 + inet6/filter/limit-1116 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-384 + inet/filter/logdrop-384 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-384 -m limit --limit 1/second -j LOG + inet/filter/logdrop-384 -j DROP + inet6/filter/logdrop-384 -j DROP inet/filter/limit-1116 -j ACCEPT inet6/filter/limit-1116 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -17364,27 +15105,27 @@ Filter 1411 {"flow-limit":{"name":"C","update":false},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1412 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1118 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-386 - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-386 - inet/filter/logdrop-386 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-386 -m limit --limit 1/second -j LOG - inet/filter/logdrop-386 -j DROP - inet6/filter/logdrop-386 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-385 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-385 + inet/filter/logdrop-385 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-385 -m limit --limit 1/second -j LOG + inet/filter/logdrop-385 -j DROP + inet6/filter/logdrop-385 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1413 {"flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1119 {"flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1118 inet6/filter/INPUT -i eth0 -j limit-1118 - inet/filter/limit-1118 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-387 - inet6/filter/limit-1118 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-387 - inet/filter/logdrop-387 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-387 -m limit --limit 1/second -j LOG - inet/filter/logdrop-387 -j DROP - inet6/filter/logdrop-387 -j DROP + inet/filter/limit-1118 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-386 + inet6/filter/limit-1118 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-386 + inet/filter/logdrop-386 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-386 -m limit --limit 1/second -j LOG + inet/filter/logdrop-386 -j DROP + inet6/filter/logdrop-386 -j DROP inet/filter/limit-1118 -m limit --limit 1/second -j LOG inet6/filter/limit-1118 -m limit --limit 1/second -j LOG inet/filter/limit-1118 -j ACCEPT @@ -17396,31 +15137,31 @@ Filter 1413 {"flow-limit":{"name":"C","update":false},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1414 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1120 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1119 inet6/filter/INPUT -i eth0 -j limit-1119 - inet/filter/limit-1119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-388 - inet6/filter/limit-1119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-388 - inet/filter/logdrop-388 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-388 -m limit --limit 1/second -j LOG - inet/filter/logdrop-388 -j DROP - inet6/filter/logdrop-388 -j DROP + inet/filter/limit-1119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-387 + inet6/filter/limit-1119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-387 + inet/filter/logdrop-387 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-387 -m limit --limit 1/second -j LOG + inet/filter/logdrop-387 -j DROP + inet6/filter/logdrop-387 -j DROP inet/filter/limit-1119 -m limit --limit 1/second -j LOG inet6/filter/limit-1119 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1415 {"flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1121 {"flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1120 inet6/filter/INPUT -i eth0 -j limit-1120 - inet/filter/limit-1120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-389 - inet6/filter/limit-1120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-389 - inet/filter/logdrop-389 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-389 -m limit --limit 1/second -j LOG - inet/filter/logdrop-389 -j DROP - inet6/filter/logdrop-389 -j DROP + inet/filter/limit-1120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-388 + inet6/filter/limit-1120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-388 + inet/filter/logdrop-388 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-388 -m limit --limit 1/second -j LOG + inet/filter/logdrop-388 -j DROP + inet6/filter/logdrop-388 -j DROP inet/filter/limit-1120 -j ACCEPT inet6/filter/limit-1120 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -17430,27 +15171,27 @@ Filter 1415 {"flow-limit":{"name":"C","update":false},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1416 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1122 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-390 - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-390 - inet/filter/logdrop-390 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-390 -m limit --limit 1/second -j LOG - inet/filter/logdrop-390 -j DROP - inet6/filter/logdrop-390 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-389 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-389 + inet/filter/logdrop-389 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-389 -m limit --limit 1/second -j LOG + inet/filter/logdrop-389 -j DROP + inet6/filter/logdrop-389 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1417 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1123 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1122 inet6/filter/INPUT -i eth0 -j limit-1122 - inet/filter/limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-391 - inet6/filter/limit-1122 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-391 - inet/filter/logdrop-391 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-391 -m limit --limit 1/second -j LOG - inet/filter/logdrop-391 -j DROP - inet6/filter/logdrop-391 -j DROP + inet/filter/limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-390 + inet6/filter/limit-1122 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-390 + inet/filter/logdrop-390 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-390 -m limit --limit 1/second -j LOG + inet/filter/logdrop-390 -j DROP + inet6/filter/logdrop-390 -j DROP inet/filter/limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-1122 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -17460,31 +15201,31 @@ Filter 1417 {"flow-limit":{"addr":"dest","name":"C"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1418 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1124 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1123 inet6/filter/INPUT -i eth0 -j limit-1123 - inet/filter/limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-392 - inet6/filter/limit-1123 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-392 - inet/filter/logdrop-392 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-392 -m limit --limit 1/second -j LOG - inet/filter/logdrop-392 -j DROP - inet6/filter/logdrop-392 -j DROP + inet/filter/limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-391 + inet6/filter/limit-1123 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-391 + inet/filter/logdrop-391 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-391 -m limit --limit 1/second -j LOG + inet/filter/logdrop-391 -j DROP + inet6/filter/logdrop-391 -j DROP inet/filter/limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-1123 -m recent --name user:C --rdest --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1419 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1125 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1124 inet6/filter/INPUT -i eth0 -j limit-1124 - inet/filter/limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-393 - inet6/filter/limit-1124 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-393 - inet/filter/logdrop-393 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-393 -m limit --limit 1/second -j LOG - inet/filter/logdrop-393 -j DROP - inet6/filter/logdrop-393 -j DROP + inet/filter/limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-392 + inet6/filter/limit-1124 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-392 + inet/filter/logdrop-392 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-392 -m limit --limit 1/second -j LOG + inet/filter/logdrop-392 -j DROP + inet6/filter/logdrop-392 -j DROP inet/filter/limit-1124 -m limit --limit 1/second -j LOG inet6/filter/limit-1124 -m limit --limit 1/second -j LOG inet/filter/limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT @@ -17496,31 +15237,31 @@ Filter 1419 {"flow-limit":{"addr":"dest","name":"C"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1420 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1126 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1125 inet6/filter/INPUT -i eth0 -j limit-1125 - inet/filter/limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-394 - inet6/filter/limit-1125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-394 - inet/filter/logdrop-394 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-394 -m limit --limit 1/second -j LOG - inet/filter/logdrop-394 -j DROP - inet6/filter/logdrop-394 -j DROP + inet/filter/limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-393 + inet6/filter/limit-1125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-393 + inet/filter/logdrop-393 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-393 -m limit --limit 1/second -j LOG + inet/filter/logdrop-393 -j DROP + inet6/filter/logdrop-393 -j DROP inet/filter/limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-1125 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1421 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1127 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1126 inet6/filter/INPUT -i eth0 -j limit-1126 - inet/filter/limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-395 - inet6/filter/limit-1126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-395 - inet/filter/logdrop-395 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-395 -m limit --limit 1/second -j LOG - inet/filter/logdrop-395 -j DROP - inet6/filter/logdrop-395 -j DROP + inet/filter/limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-394 + inet6/filter/limit-1126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-394 + inet/filter/logdrop-394 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-394 -m limit --limit 1/second -j LOG + inet/filter/logdrop-394 -j DROP + inet6/filter/logdrop-394 -j DROP inet/filter/limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-1126 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -17530,31 +15271,31 @@ Filter 1421 {"flow-limit":{"addr":"dest","name":"C"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1422 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1128 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1127 inet6/filter/INPUT -i eth0 -j limit-1127 - inet/filter/limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-396 - inet6/filter/limit-1127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-396 - inet/filter/logdrop-396 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-396 -m limit --limit 1/second -j LOG - inet/filter/logdrop-396 -j DROP - inet6/filter/logdrop-396 -j DROP + inet/filter/limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-395 + inet6/filter/limit-1127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-395 + inet/filter/logdrop-395 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-395 -m limit --limit 1/second -j LOG + inet/filter/logdrop-395 -j DROP + inet6/filter/logdrop-395 -j DROP inet/filter/limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-1127 -m recent --name user:C --rdest --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1423 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1129 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1128 inet6/filter/INPUT -i eth0 -j limit-1128 - inet/filter/limit-1128 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-397 - inet6/filter/limit-1128 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-397 - inet/filter/logdrop-397 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-397 -m limit --limit 1/second -j LOG - inet/filter/logdrop-397 -j DROP - inet6/filter/logdrop-397 -j DROP + inet/filter/limit-1128 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-396 + inet6/filter/limit-1128 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-396 + inet/filter/logdrop-396 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-396 -m limit --limit 1/second -j LOG + inet/filter/logdrop-396 -j DROP + inet6/filter/logdrop-396 -j DROP inet/filter/limit-1128 -j ACCEPT inet6/filter/limit-1128 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -17564,27 +15305,27 @@ Filter 1423 {"flow-limit":{"addr":"dest","name":"C","upda inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1424 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1130 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-398 - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-398 - inet/filter/logdrop-398 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-398 -m limit --limit 1/second -j LOG - inet/filter/logdrop-398 -j DROP - inet6/filter/logdrop-398 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-397 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-397 + inet/filter/logdrop-397 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-397 -m limit --limit 1/second -j LOG + inet/filter/logdrop-397 -j DROP + inet6/filter/logdrop-397 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1425 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1131 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1130 inet6/filter/INPUT -i eth0 -j limit-1130 - inet/filter/limit-1130 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-399 - inet6/filter/limit-1130 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-399 - inet/filter/logdrop-399 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-399 -m limit --limit 1/second -j LOG - inet/filter/logdrop-399 -j DROP - inet6/filter/logdrop-399 -j DROP + inet/filter/limit-1130 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-398 + inet6/filter/limit-1130 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-398 + inet/filter/logdrop-398 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-398 -m limit --limit 1/second -j LOG + inet/filter/logdrop-398 -j DROP + inet6/filter/logdrop-398 -j DROP inet/filter/limit-1130 -m limit --limit 1/second -j LOG inet6/filter/limit-1130 -m limit --limit 1/second -j LOG inet/filter/limit-1130 -j ACCEPT @@ -17596,31 +15337,31 @@ Filter 1425 {"flow-limit":{"addr":"dest","name":"C","upda inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1426 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1132 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1131 inet6/filter/INPUT -i eth0 -j limit-1131 - inet/filter/limit-1131 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-400 - inet6/filter/limit-1131 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-400 - inet/filter/logdrop-400 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-400 -m limit --limit 1/second -j LOG - inet/filter/logdrop-400 -j DROP - inet6/filter/logdrop-400 -j DROP + inet/filter/limit-1131 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-399 + inet6/filter/limit-1131 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-399 + inet/filter/logdrop-399 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-399 -m limit --limit 1/second -j LOG + inet/filter/logdrop-399 -j DROP + inet6/filter/logdrop-399 -j DROP inet/filter/limit-1131 -m limit --limit 1/second -j LOG inet6/filter/limit-1131 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1427 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1133 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1132 inet6/filter/INPUT -i eth0 -j limit-1132 - inet/filter/limit-1132 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-401 - inet6/filter/limit-1132 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-401 - inet/filter/logdrop-401 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-401 -m limit --limit 1/second -j LOG - inet/filter/logdrop-401 -j DROP - inet6/filter/logdrop-401 -j DROP + inet/filter/limit-1132 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-400 + inet6/filter/limit-1132 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-400 + inet/filter/logdrop-400 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-400 -m limit --limit 1/second -j LOG + inet/filter/logdrop-400 -j DROP + inet6/filter/logdrop-400 -j DROP inet/filter/limit-1132 -j ACCEPT inet6/filter/limit-1132 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -17630,18 +15371,18 @@ Filter 1427 {"flow-limit":{"addr":"dest","name":"C","upda inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1428 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1134 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-402 - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-402 - inet/filter/logdrop-402 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-402 -m limit --limit 1/second -j LOG - inet/filter/logdrop-402 -j DROP - inet6/filter/logdrop-402 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-401 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-401 + inet/filter/logdrop-401 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-401 -m limit --limit 1/second -j LOG + inet/filter/logdrop-401 -j DROP + inet6/filter/logdrop-401 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1429 {"flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1135 {"flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1134 inet6/filter/INPUT -i eth0 -j limit-1134 @@ -17656,7 +15397,7 @@ Filter 1429 {"flow-limit":{"log":false},"in":"A","no-trac inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1430 {"action":"pass","flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1136 {"action":"pass","flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1135 inet6/filter/INPUT -i eth0 -j limit-1135 @@ -17667,7 +15408,7 @@ Filter 1430 {"action":"pass","flow-limit":{"log":false}," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1431 {"flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1137 {"flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1136 inet6/filter/INPUT -i eth0 -j limit-1136 @@ -17684,7 +15425,7 @@ Filter 1431 {"flow-limit":{"log":false},"in":"A","log":tr inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1432 {"action":"pass","flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1138 {"action":"pass","flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1137 inet6/filter/INPUT -i eth0 -j limit-1137 @@ -17695,7 +15436,7 @@ Filter 1432 {"action":"pass","flow-limit":{"log":false}," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1433 {"flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1139 {"flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1138 inet6/filter/INPUT -i eth0 -j limit-1138 @@ -17710,7 +15451,7 @@ Filter 1433 {"flow-limit":{"log":false},"in":"A","log":"n inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1434 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1140 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1139 inet6/filter/INPUT -i eth0 -j limit-1139 @@ -17721,7 +15462,7 @@ Filter 1434 {"action":"pass","flow-limit":{"log":false}," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1435 {"flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1141 {"flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1140 inet6/filter/INPUT -i eth0 -j limit-1140 @@ -17736,7 +15477,7 @@ Filter 1435 {"flow-limit":{"log":false,"name":"A"},"in":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1436 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1142 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1141 inet6/filter/INPUT -i eth0 -j limit-1141 @@ -17747,7 +15488,7 @@ Filter 1436 {"action":"pass","flow-limit":{"log":false,"n inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1437 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1143 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1142 inet6/filter/INPUT -i eth0 -j limit-1142 @@ -17764,7 +15505,7 @@ Filter 1437 {"flow-limit":{"log":false,"name":"A"},"in":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1438 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1144 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1143 inet6/filter/INPUT -i eth0 -j limit-1143 @@ -17775,7 +15516,7 @@ Filter 1438 {"action":"pass","flow-limit":{"log":false,"n inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1439 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1145 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1144 inet6/filter/INPUT -i eth0 -j limit-1144 @@ -17790,7 +15531,7 @@ Filter 1439 {"flow-limit":{"log":false,"name":"A"},"in":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1440 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1146 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1145 inet6/filter/INPUT -i eth0 -j limit-1145 @@ -17801,7 +15542,7 @@ Filter 1440 {"action":"pass","flow-limit":{"log":false,"n inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1441 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1147 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1146 inet6/filter/INPUT -i eth0 -j limit-1146 @@ -17816,14 +15557,14 @@ Filter 1441 {"flow-limit":{"log":false,"name":"A","update inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1442 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1148 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1443 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1149 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1148 inet6/filter/INPUT -i eth0 -j limit-1148 @@ -17840,7 +15581,7 @@ Filter 1443 {"flow-limit":{"log":false,"name":"A","update inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1444 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1150 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1149 inet6/filter/INPUT -i eth0 -j limit-1149 @@ -17851,7 +15592,7 @@ Filter 1444 {"action":"pass","flow-limit":{"log":false,"n inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1445 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1151 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1150 inet6/filter/INPUT -i eth0 -j limit-1150 @@ -17866,14 +15607,14 @@ Filter 1445 {"flow-limit":{"log":false,"name":"A","update inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1446 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1152 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1447 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1153 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1152 inet6/filter/INPUT -i eth0 -j limit-1152 @@ -17888,7 +15629,7 @@ Filter 1447 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1448 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1154 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1153 inet6/filter/INPUT -i eth0 -j limit-1153 @@ -17899,7 +15640,7 @@ Filter 1448 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1449 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1155 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1154 inet6/filter/INPUT -i eth0 -j limit-1154 @@ -17916,7 +15657,7 @@ Filter 1449 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1450 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1156 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1155 inet6/filter/INPUT -i eth0 -j limit-1155 @@ -17927,7 +15668,7 @@ Filter 1450 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1451 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1157 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1156 inet6/filter/INPUT -i eth0 -j limit-1156 @@ -17942,7 +15683,7 @@ Filter 1451 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1452 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1158 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1157 inet6/filter/INPUT -i eth0 -j limit-1157 @@ -17953,7 +15694,7 @@ Filter 1452 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1453 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1159 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1158 inet6/filter/INPUT -i eth0 -j limit-1158 @@ -17968,14 +15709,14 @@ Filter 1453 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1454 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1160 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1455 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1161 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1160 inet6/filter/INPUT -i eth0 -j limit-1160 @@ -17992,7 +15733,7 @@ Filter 1455 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1456 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1162 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1161 inet6/filter/INPUT -i eth0 -j limit-1161 @@ -18003,7 +15744,7 @@ Filter 1456 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1457 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1163 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1162 inet6/filter/INPUT -i eth0 -j limit-1162 @@ -18018,14 +15759,14 @@ Filter 1457 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1458 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1164 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1459 {"flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1165 {"flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1164 inet6/filter/INPUT -i eth0 -j limit-1164 @@ -18040,7 +15781,7 @@ Filter 1459 {"flow-limit":{"log":false,"name":"C"},"in":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1460 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1166 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1165 inet6/filter/INPUT -i eth0 -j limit-1165 @@ -18051,7 +15792,7 @@ Filter 1460 {"action":"pass","flow-limit":{"log":false,"n inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1461 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1167 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1166 inet6/filter/INPUT -i eth0 -j limit-1166 @@ -18068,7 +15809,7 @@ Filter 1461 {"flow-limit":{"log":false,"name":"C"},"in":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1462 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1168 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1167 inet6/filter/INPUT -i eth0 -j limit-1167 @@ -18079,7 +15820,7 @@ Filter 1462 {"action":"pass","flow-limit":{"log":false,"n inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1463 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1169 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1168 inet6/filter/INPUT -i eth0 -j limit-1168 @@ -18094,7 +15835,7 @@ Filter 1463 {"flow-limit":{"log":false,"name":"C"},"in":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1464 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1170 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1169 inet6/filter/INPUT -i eth0 -j limit-1169 @@ -18105,7 +15846,7 @@ Filter 1464 {"action":"pass","flow-limit":{"log":false,"n inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1465 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1171 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1170 inet6/filter/INPUT -i eth0 -j limit-1170 @@ -18120,14 +15861,14 @@ Filter 1465 {"flow-limit":{"log":false,"name":"C","update inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1466 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1172 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1467 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1173 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1172 inet6/filter/INPUT -i eth0 -j limit-1172 @@ -18144,7 +15885,7 @@ Filter 1467 {"flow-limit":{"log":false,"name":"C","update inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1468 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1174 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1173 inet6/filter/INPUT -i eth0 -j limit-1173 @@ -18155,7 +15896,7 @@ Filter 1468 {"action":"pass","flow-limit":{"log":false,"n inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1469 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1175 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1174 inet6/filter/INPUT -i eth0 -j limit-1174 @@ -18170,14 +15911,14 @@ Filter 1469 {"flow-limit":{"log":false,"name":"C","update inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1470 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1176 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1471 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1177 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1176 inet6/filter/INPUT -i eth0 -j limit-1176 @@ -18192,7 +15933,7 @@ Filter 1471 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1472 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1178 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1177 inet6/filter/INPUT -i eth0 -j limit-1177 @@ -18203,7 +15944,7 @@ Filter 1472 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1473 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1179 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1178 inet6/filter/INPUT -i eth0 -j limit-1178 @@ -18220,7 +15961,7 @@ Filter 1473 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1474 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1180 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1179 inet6/filter/INPUT -i eth0 -j limit-1179 @@ -18231,7 +15972,7 @@ Filter 1474 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1475 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1181 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1180 inet6/filter/INPUT -i eth0 -j limit-1180 @@ -18246,7 +15987,7 @@ Filter 1475 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1476 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1182 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1181 inet6/filter/INPUT -i eth0 -j limit-1181 @@ -18257,7 +15998,7 @@ Filter 1476 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1477 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1183 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1182 inet6/filter/INPUT -i eth0 -j limit-1182 @@ -18272,14 +16013,14 @@ Filter 1477 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1478 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1184 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1479 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1185 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1184 inet6/filter/INPUT -i eth0 -j limit-1184 @@ -18296,7 +16037,7 @@ Filter 1479 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1480 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1186 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1185 inet6/filter/INPUT -i eth0 -j limit-1185 @@ -18307,7 +16048,7 @@ Filter 1480 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1481 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1187 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1186 inet6/filter/INPUT -i eth0 -j limit-1186 @@ -18322,14 +16063,14 @@ Filter 1481 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1482 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1188 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1483 {"flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1189 {"flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1188 inet6/filter/INPUT -i eth0 -j limit-1188 @@ -18344,7 +16085,7 @@ Filter 1483 {"flow-limit":{"log":"none"},"in":"A","no-tra inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1484 {"action":"pass","flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1190 {"action":"pass","flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1189 inet6/filter/INPUT -i eth0 -j limit-1189 @@ -18355,7 +16096,7 @@ Filter 1484 {"action":"pass","flow-limit":{"log":"none"}, inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1485 {"flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1191 {"flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1190 inet6/filter/INPUT -i eth0 -j limit-1190 @@ -18372,7 +16113,7 @@ Filter 1485 {"flow-limit":{"log":"none"},"in":"A","log":t inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1486 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1192 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1191 inet6/filter/INPUT -i eth0 -j limit-1191 @@ -18383,7 +16124,7 @@ Filter 1486 {"action":"pass","flow-limit":{"log":"none"}, inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1487 {"flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1193 {"flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1192 inet6/filter/INPUT -i eth0 -j limit-1192 @@ -18398,7 +16139,7 @@ Filter 1487 {"flow-limit":{"log":"none"},"in":"A","log":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1488 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1194 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1193 inet6/filter/INPUT -i eth0 -j limit-1193 @@ -18409,7 +16150,7 @@ Filter 1488 {"action":"pass","flow-limit":{"log":"none"}, inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1489 {"flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1195 {"flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1194 inet6/filter/INPUT -i eth0 -j limit-1194 @@ -18424,7 +16165,7 @@ Filter 1489 {"flow-limit":{"log":"none","name":"A"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1490 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1196 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1195 inet6/filter/INPUT -i eth0 -j limit-1195 @@ -18435,7 +16176,7 @@ Filter 1490 {"action":"pass","flow-limit":{"log":"none"," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1491 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1197 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1196 inet6/filter/INPUT -i eth0 -j limit-1196 @@ -18452,7 +16193,7 @@ Filter 1491 {"flow-limit":{"log":"none","name":"A"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1492 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1198 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1197 inet6/filter/INPUT -i eth0 -j limit-1197 @@ -18463,7 +16204,7 @@ Filter 1492 {"action":"pass","flow-limit":{"log":"none"," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1493 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1199 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1198 inet6/filter/INPUT -i eth0 -j limit-1198 @@ -18478,7 +16219,7 @@ Filter 1493 {"flow-limit":{"log":"none","name":"A"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1494 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1200 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1199 inet6/filter/INPUT -i eth0 -j limit-1199 @@ -18489,7 +16230,7 @@ Filter 1494 {"action":"pass","flow-limit":{"log":"none"," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1495 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1201 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1200 inet6/filter/INPUT -i eth0 -j limit-1200 @@ -18504,14 +16245,14 @@ Filter 1495 {"flow-limit":{"log":"none","name":"A","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1496 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1202 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1497 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1203 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1202 inet6/filter/INPUT -i eth0 -j limit-1202 @@ -18528,7 +16269,7 @@ Filter 1497 {"flow-limit":{"log":"none","name":"A","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1498 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1204 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1203 inet6/filter/INPUT -i eth0 -j limit-1203 @@ -18539,7 +16280,7 @@ Filter 1498 {"action":"pass","flow-limit":{"log":"none"," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1499 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1205 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1204 inet6/filter/INPUT -i eth0 -j limit-1204 @@ -18554,14 +16295,14 @@ Filter 1499 {"flow-limit":{"log":"none","name":"A","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1500 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1206 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1501 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1207 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1206 inet6/filter/INPUT -i eth0 -j limit-1206 @@ -18576,7 +16317,7 @@ Filter 1501 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1502 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1208 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1207 inet6/filter/INPUT -i eth0 -j limit-1207 @@ -18587,7 +16328,7 @@ Filter 1502 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1503 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1209 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1208 inet6/filter/INPUT -i eth0 -j limit-1208 @@ -18604,7 +16345,7 @@ Filter 1503 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1504 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1210 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1209 inet6/filter/INPUT -i eth0 -j limit-1209 @@ -18615,7 +16356,7 @@ Filter 1504 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1505 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1211 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1210 inet6/filter/INPUT -i eth0 -j limit-1210 @@ -18630,7 +16371,7 @@ Filter 1505 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1506 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1212 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1211 inet6/filter/INPUT -i eth0 -j limit-1211 @@ -18641,7 +16382,7 @@ Filter 1506 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1507 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1213 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1212 inet6/filter/INPUT -i eth0 -j limit-1212 @@ -18656,14 +16397,14 @@ Filter 1507 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1508 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1214 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1509 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1215 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1214 inet6/filter/INPUT -i eth0 -j limit-1214 @@ -18680,7 +16421,7 @@ Filter 1509 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1510 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1216 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1215 inet6/filter/INPUT -i eth0 -j limit-1215 @@ -18691,7 +16432,7 @@ Filter 1510 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1511 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1217 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1216 inet6/filter/INPUT -i eth0 -j limit-1216 @@ -18706,14 +16447,14 @@ Filter 1511 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1512 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1218 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1513 {"flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1219 {"flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1218 inet6/filter/INPUT -i eth0 -j limit-1218 @@ -18728,7 +16469,7 @@ Filter 1513 {"flow-limit":{"log":"none","name":"C"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1514 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1220 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1219 inet6/filter/INPUT -i eth0 -j limit-1219 @@ -18739,7 +16480,7 @@ Filter 1514 {"action":"pass","flow-limit":{"log":"none"," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1515 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1221 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1220 inet6/filter/INPUT -i eth0 -j limit-1220 @@ -18756,7 +16497,7 @@ Filter 1515 {"flow-limit":{"log":"none","name":"C"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1516 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1222 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1221 inet6/filter/INPUT -i eth0 -j limit-1221 @@ -18767,7 +16508,7 @@ Filter 1516 {"action":"pass","flow-limit":{"log":"none"," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1517 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1223 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1222 inet6/filter/INPUT -i eth0 -j limit-1222 @@ -18782,7 +16523,7 @@ Filter 1517 {"flow-limit":{"log":"none","name":"C"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1518 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1224 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1223 inet6/filter/INPUT -i eth0 -j limit-1223 @@ -18793,7 +16534,7 @@ Filter 1518 {"action":"pass","flow-limit":{"log":"none"," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1519 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1225 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1224 inet6/filter/INPUT -i eth0 -j limit-1224 @@ -18808,14 +16549,14 @@ Filter 1519 {"flow-limit":{"log":"none","name":"C","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1520 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1226 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1521 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1227 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1226 inet6/filter/INPUT -i eth0 -j limit-1226 @@ -18832,7 +16573,7 @@ Filter 1521 {"flow-limit":{"log":"none","name":"C","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1522 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1228 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1227 inet6/filter/INPUT -i eth0 -j limit-1227 @@ -18843,7 +16584,7 @@ Filter 1522 {"action":"pass","flow-limit":{"log":"none"," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1523 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1229 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1228 inet6/filter/INPUT -i eth0 -j limit-1228 @@ -18858,14 +16599,14 @@ Filter 1523 {"flow-limit":{"log":"none","name":"C","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1524 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1230 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1525 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1231 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1230 inet6/filter/INPUT -i eth0 -j limit-1230 @@ -18880,7 +16621,7 @@ Filter 1525 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1526 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1232 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1231 inet6/filter/INPUT -i eth0 -j limit-1231 @@ -18891,7 +16632,7 @@ Filter 1526 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1527 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1233 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1232 inet6/filter/INPUT -i eth0 -j limit-1232 @@ -18908,7 +16649,7 @@ Filter 1527 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1528 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1234 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1233 inet6/filter/INPUT -i eth0 -j limit-1233 @@ -18919,7 +16660,7 @@ Filter 1528 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1529 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1235 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1234 inet6/filter/INPUT -i eth0 -j limit-1234 @@ -18934,7 +16675,7 @@ Filter 1529 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1530 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1236 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1235 inet6/filter/INPUT -i eth0 -j limit-1235 @@ -18945,7 +16686,7 @@ Filter 1530 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1531 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1237 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1236 inet6/filter/INPUT -i eth0 -j limit-1236 @@ -18960,14 +16701,14 @@ Filter 1531 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1532 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1238 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1533 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1239 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1238 inet6/filter/INPUT -i eth0 -j limit-1238 @@ -18984,7 +16725,7 @@ Filter 1533 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1534 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1240 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1239 inet6/filter/INPUT -i eth0 -j limit-1239 @@ -18995,7 +16736,7 @@ Filter 1534 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1535 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1241 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1240 inet6/filter/INPUT -i eth0 -j limit-1240 @@ -19010,23 +16751,23 @@ Filter 1535 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1536 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1242 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1537 {"flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} +Filter 1243 {"flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1242 inet6/filter/INPUT -i eth0 -j limit-1242 - inet/filter/limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-403 - inet6/filter/limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-403 - inet/filter/logdrop-403 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-403 -m limit --limit 1/second -j LOG - inet/filter/logdrop-403 -j DROP - inet6/filter/logdrop-403 -j DROP + inet/filter/limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-402 + inet6/filter/limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-402 + inet/filter/logdrop-402 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-402 -m limit --limit 1/second -j LOG + inet/filter/logdrop-402 -j DROP + inet6/filter/logdrop-402 -j DROP inet/filter/limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -19036,31 +16777,31 @@ Filter 1537 {"flow-limit":{"interval":5},"in":"A","no-tra inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1538 {"action":"pass","flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} +Filter 1244 {"action":"pass","flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1243 inet6/filter/INPUT -i eth0 -j limit-1243 - inet/filter/limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-404 - inet6/filter/limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-404 - inet/filter/logdrop-404 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-404 -m limit --limit 1/second -j LOG - inet/filter/logdrop-404 -j DROP - inet6/filter/logdrop-404 -j DROP + inet/filter/limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-403 + inet6/filter/limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-403 + inet/filter/logdrop-403 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-403 -m limit --limit 1/second -j LOG + inet/filter/logdrop-403 -j DROP + inet6/filter/logdrop-403 -j DROP inet/filter/limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --set inet6/filter/limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1539 {"flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1245 {"flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1244 inet6/filter/INPUT -i eth0 -j limit-1244 - inet/filter/limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-405 - inet6/filter/limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-405 - inet/filter/logdrop-405 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-405 -m limit --limit 1/second -j LOG - inet/filter/logdrop-405 -j DROP - inet6/filter/logdrop-405 -j DROP + inet/filter/limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-404 + inet6/filter/limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-404 + inet/filter/logdrop-404 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-404 -m limit --limit 1/second -j LOG + inet/filter/logdrop-404 -j DROP + inet6/filter/logdrop-404 -j DROP inet/filter/limit-1244 -m limit --limit 1/second -j LOG inet6/filter/limit-1244 -m limit --limit 1/second -j LOG inet/filter/limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -19072,31 +16813,31 @@ Filter 1539 {"flow-limit":{"interval":5},"in":"A","log":t inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1540 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1246 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1245 inet6/filter/INPUT -i eth0 -j limit-1245 - inet/filter/limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-406 - inet6/filter/limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-406 - inet/filter/logdrop-406 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-406 -m limit --limit 1/second -j LOG - inet/filter/logdrop-406 -j DROP - inet6/filter/logdrop-406 -j DROP + inet/filter/limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-405 + inet6/filter/limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-405 + inet/filter/logdrop-405 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-405 -m limit --limit 1/second -j LOG + inet/filter/logdrop-405 -j DROP + inet6/filter/logdrop-405 -j DROP inet/filter/limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1541 {"flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1247 {"flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1246 inet6/filter/INPUT -i eth0 -j limit-1246 - inet/filter/limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-407 - inet6/filter/limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-407 - inet/filter/logdrop-407 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-407 -m limit --limit 1/second -j LOG - inet/filter/logdrop-407 -j DROP - inet6/filter/logdrop-407 -j DROP + inet/filter/limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-406 + inet6/filter/limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-406 + inet/filter/logdrop-406 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-406 -m limit --limit 1/second -j LOG + inet/filter/logdrop-406 -j DROP + inet6/filter/logdrop-406 -j DROP inet/filter/limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -19106,31 +16847,31 @@ Filter 1541 {"flow-limit":{"interval":5},"in":"A","log":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1542 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1248 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1247 inet6/filter/INPUT -i eth0 -j limit-1247 - inet/filter/limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-408 - inet6/filter/limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-408 - inet/filter/logdrop-408 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-408 -m limit --limit 1/second -j LOG - inet/filter/logdrop-408 -j DROP - inet6/filter/logdrop-408 -j DROP + inet/filter/limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-407 + inet6/filter/limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-407 + inet/filter/logdrop-407 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-407 -m limit --limit 1/second -j LOG + inet/filter/logdrop-407 -j DROP + inet6/filter/logdrop-407 -j DROP inet/filter/limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --set inet6/filter/limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1543 {"flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1249 {"flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1248 inet6/filter/INPUT -i eth0 -j limit-1248 - inet/filter/limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-409 - inet6/filter/limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-409 - inet/filter/logdrop-409 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-409 -m limit --limit 1/second -j LOG - inet/filter/logdrop-409 -j DROP - inet6/filter/logdrop-409 -j DROP + inet/filter/limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-408 + inet6/filter/limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-408 + inet/filter/logdrop-408 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-408 -m limit --limit 1/second -j LOG + inet/filter/logdrop-408 -j DROP + inet6/filter/logdrop-408 -j DROP inet/filter/limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -19140,31 +16881,31 @@ Filter 1543 {"flow-limit":{"interval":5,"name":"A"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1544 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1250 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1249 inet6/filter/INPUT -i eth0 -j limit-1249 - inet/filter/limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-410 - inet6/filter/limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-410 - inet/filter/logdrop-410 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-410 -m limit --limit 1/second -j LOG - inet/filter/logdrop-410 -j DROP - inet6/filter/logdrop-410 -j DROP + inet/filter/limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-409 + inet6/filter/limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-409 + inet/filter/logdrop-409 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-409 -m limit --limit 1/second -j LOG + inet/filter/logdrop-409 -j DROP + inet6/filter/logdrop-409 -j DROP inet/filter/limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1545 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1251 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1250 inet6/filter/INPUT -i eth0 -j limit-1250 - inet/filter/limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-411 - inet6/filter/limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-411 - inet/filter/logdrop-411 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-411 -m limit --limit 1/second -j LOG - inet/filter/logdrop-411 -j DROP - inet6/filter/logdrop-411 -j DROP + inet/filter/limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-410 + inet6/filter/limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-410 + inet/filter/logdrop-410 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-410 -m limit --limit 1/second -j LOG + inet/filter/logdrop-410 -j DROP + inet6/filter/logdrop-410 -j DROP inet/filter/limit-1250 -m limit --limit 1/second -j LOG inet6/filter/limit-1250 -m limit --limit 1/second -j LOG inet/filter/limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -19176,31 +16917,31 @@ Filter 1545 {"flow-limit":{"interval":5,"name":"A"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1546 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1252 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1251 inet6/filter/INPUT -i eth0 -j limit-1251 - inet/filter/limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-412 - inet6/filter/limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-412 - inet/filter/logdrop-412 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-412 -m limit --limit 1/second -j LOG - inet/filter/logdrop-412 -j DROP - inet6/filter/logdrop-412 -j DROP + inet/filter/limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-411 + inet6/filter/limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-411 + inet/filter/logdrop-411 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-411 -m limit --limit 1/second -j LOG + inet/filter/logdrop-411 -j DROP + inet6/filter/logdrop-411 -j DROP inet/filter/limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1547 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1253 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1252 inet6/filter/INPUT -i eth0 -j limit-1252 - inet/filter/limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-413 - inet6/filter/limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-413 - inet/filter/logdrop-413 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-413 -m limit --limit 1/second -j LOG - inet/filter/logdrop-413 -j DROP - inet6/filter/logdrop-413 -j DROP + inet/filter/limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-412 + inet6/filter/limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-412 + inet/filter/logdrop-412 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-412 -m limit --limit 1/second -j LOG + inet/filter/logdrop-412 -j DROP + inet6/filter/logdrop-412 -j DROP inet/filter/limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -19210,31 +16951,31 @@ Filter 1547 {"flow-limit":{"interval":5,"name":"A"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1548 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1254 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1253 inet6/filter/INPUT -i eth0 -j limit-1253 - inet/filter/limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-414 - inet6/filter/limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-414 - inet/filter/logdrop-414 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-414 -m limit --limit 1/second -j LOG - inet/filter/logdrop-414 -j DROP - inet6/filter/logdrop-414 -j DROP + inet/filter/limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-413 + inet6/filter/limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-413 + inet/filter/logdrop-413 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-413 -m limit --limit 1/second -j LOG + inet/filter/logdrop-413 -j DROP + inet6/filter/logdrop-413 -j DROP inet/filter/limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1549 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1255 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1254 inet6/filter/INPUT -i eth0 -j limit-1254 - inet/filter/limit-1254 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-415 - inet6/filter/limit-1254 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-415 - inet/filter/logdrop-415 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-415 -m limit --limit 1/second -j LOG - inet/filter/logdrop-415 -j DROP - inet6/filter/logdrop-415 -j DROP + inet/filter/limit-1254 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-414 + inet6/filter/limit-1254 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-414 + inet/filter/logdrop-414 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-414 -m limit --limit 1/second -j LOG + inet/filter/logdrop-414 -j DROP + inet6/filter/logdrop-414 -j DROP inet/filter/limit-1254 -j ACCEPT inet6/filter/limit-1254 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -19244,27 +16985,27 @@ Filter 1549 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1550 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1256 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-416 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-416 - inet/filter/logdrop-416 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-416 -m limit --limit 1/second -j LOG - inet/filter/logdrop-416 -j DROP - inet6/filter/logdrop-416 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-415 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-415 + inet/filter/logdrop-415 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-415 -m limit --limit 1/second -j LOG + inet/filter/logdrop-415 -j DROP + inet6/filter/logdrop-415 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1551 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1257 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1256 inet6/filter/INPUT -i eth0 -j limit-1256 - inet/filter/limit-1256 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-417 - inet6/filter/limit-1256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-417 - inet/filter/logdrop-417 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-417 -m limit --limit 1/second -j LOG - inet/filter/logdrop-417 -j DROP - inet6/filter/logdrop-417 -j DROP + inet/filter/limit-1256 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-416 + inet6/filter/limit-1256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-416 + inet/filter/logdrop-416 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-416 -m limit --limit 1/second -j LOG + inet/filter/logdrop-416 -j DROP + inet6/filter/logdrop-416 -j DROP inet/filter/limit-1256 -m limit --limit 1/second -j LOG inet6/filter/limit-1256 -m limit --limit 1/second -j LOG inet/filter/limit-1256 -j ACCEPT @@ -19276,31 +17017,31 @@ Filter 1551 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1552 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1258 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1257 inet6/filter/INPUT -i eth0 -j limit-1257 - inet/filter/limit-1257 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-418 - inet6/filter/limit-1257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-418 - inet/filter/logdrop-418 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-418 -m limit --limit 1/second -j LOG - inet/filter/logdrop-418 -j DROP - inet6/filter/logdrop-418 -j DROP + inet/filter/limit-1257 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-417 + inet6/filter/limit-1257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-417 + inet/filter/logdrop-417 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-417 -m limit --limit 1/second -j LOG + inet/filter/logdrop-417 -j DROP + inet6/filter/logdrop-417 -j DROP inet/filter/limit-1257 -m limit --limit 1/second -j LOG inet6/filter/limit-1257 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1553 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1259 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1258 inet6/filter/INPUT -i eth0 -j limit-1258 - inet/filter/limit-1258 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-419 - inet6/filter/limit-1258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-419 - inet/filter/logdrop-419 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-419 -m limit --limit 1/second -j LOG - inet/filter/logdrop-419 -j DROP - inet6/filter/logdrop-419 -j DROP + inet/filter/limit-1258 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-418 + inet6/filter/limit-1258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-418 + inet/filter/logdrop-418 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-418 -m limit --limit 1/second -j LOG + inet/filter/logdrop-418 -j DROP + inet6/filter/logdrop-418 -j DROP inet/filter/limit-1258 -j ACCEPT inet6/filter/limit-1258 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -19310,27 +17051,27 @@ Filter 1553 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1554 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1260 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-420 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-420 - inet/filter/logdrop-420 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-420 -m limit --limit 1/second -j LOG - inet/filter/logdrop-420 -j DROP - inet6/filter/logdrop-420 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-419 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-419 + inet/filter/logdrop-419 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-419 -m limit --limit 1/second -j LOG + inet/filter/logdrop-419 -j DROP + inet6/filter/logdrop-419 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1555 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1261 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1260 inet6/filter/INPUT -i eth0 -j limit-1260 - inet/filter/limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-421 - inet6/filter/limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-421 - inet/filter/logdrop-421 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-421 -m limit --limit 1/second -j LOG - inet/filter/logdrop-421 -j DROP - inet6/filter/logdrop-421 -j DROP + inet/filter/limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-420 + inet6/filter/limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-420 + inet/filter/logdrop-420 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-420 -m limit --limit 1/second -j LOG + inet/filter/logdrop-420 -j DROP + inet6/filter/logdrop-420 -j DROP inet/filter/limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -19340,31 +17081,31 @@ Filter 1555 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1556 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1262 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1261 inet6/filter/INPUT -i eth0 -j limit-1261 - inet/filter/limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-422 - inet6/filter/limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-422 - inet/filter/logdrop-422 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-422 -m limit --limit 1/second -j LOG - inet/filter/logdrop-422 -j DROP - inet6/filter/logdrop-422 -j DROP + inet/filter/limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-421 + inet6/filter/limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-421 + inet/filter/logdrop-421 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-421 -m limit --limit 1/second -j LOG + inet/filter/logdrop-421 -j DROP + inet6/filter/logdrop-421 -j DROP inet/filter/limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1557 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1263 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1262 inet6/filter/INPUT -i eth0 -j limit-1262 - inet/filter/limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-423 - inet6/filter/limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-423 - inet/filter/logdrop-423 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-423 -m limit --limit 1/second -j LOG - inet/filter/logdrop-423 -j DROP - inet6/filter/logdrop-423 -j DROP + inet/filter/limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-422 + inet6/filter/limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-422 + inet/filter/logdrop-422 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-422 -m limit --limit 1/second -j LOG + inet/filter/logdrop-422 -j DROP + inet6/filter/logdrop-422 -j DROP inet/filter/limit-1262 -m limit --limit 1/second -j LOG inet6/filter/limit-1262 -m limit --limit 1/second -j LOG inet/filter/limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT @@ -19376,31 +17117,31 @@ Filter 1557 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1558 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1264 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1263 inet6/filter/INPUT -i eth0 -j limit-1263 - inet/filter/limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-424 - inet6/filter/limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-424 - inet/filter/logdrop-424 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-424 -m limit --limit 1/second -j LOG - inet/filter/logdrop-424 -j DROP - inet6/filter/logdrop-424 -j DROP + inet/filter/limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-423 + inet6/filter/limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-423 + inet/filter/logdrop-423 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-423 -m limit --limit 1/second -j LOG + inet/filter/logdrop-423 -j DROP + inet6/filter/logdrop-423 -j DROP inet/filter/limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1559 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1265 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1264 inet6/filter/INPUT -i eth0 -j limit-1264 - inet/filter/limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-425 - inet6/filter/limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-425 - inet/filter/logdrop-425 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-425 -m limit --limit 1/second -j LOG - inet/filter/logdrop-425 -j DROP - inet6/filter/logdrop-425 -j DROP + inet/filter/limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-424 + inet6/filter/limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-424 + inet/filter/logdrop-424 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-424 -m limit --limit 1/second -j LOG + inet/filter/logdrop-424 -j DROP + inet6/filter/logdrop-424 -j DROP inet/filter/limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -19410,31 +17151,31 @@ Filter 1559 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1560 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1266 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1265 inet6/filter/INPUT -i eth0 -j limit-1265 - inet/filter/limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-426 - inet6/filter/limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-426 - inet/filter/logdrop-426 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-426 -m limit --limit 1/second -j LOG - inet/filter/logdrop-426 -j DROP - inet6/filter/logdrop-426 -j DROP + inet/filter/limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-425 + inet6/filter/limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-425 + inet/filter/logdrop-425 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-425 -m limit --limit 1/second -j LOG + inet/filter/logdrop-425 -j DROP + inet6/filter/logdrop-425 -j DROP inet/filter/limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1561 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1267 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1266 inet6/filter/INPUT -i eth0 -j limit-1266 - inet/filter/limit-1266 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-427 - inet6/filter/limit-1266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-427 - inet/filter/logdrop-427 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-427 -m limit --limit 1/second -j LOG - inet/filter/logdrop-427 -j DROP - inet6/filter/logdrop-427 -j DROP + inet/filter/limit-1266 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-426 + inet6/filter/limit-1266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-426 + inet/filter/logdrop-426 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-426 -m limit --limit 1/second -j LOG + inet/filter/logdrop-426 -j DROP + inet6/filter/logdrop-426 -j DROP inet/filter/limit-1266 -j ACCEPT inet6/filter/limit-1266 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -19444,27 +17185,27 @@ Filter 1561 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1562 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1268 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-428 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-428 - inet/filter/logdrop-428 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-428 -m limit --limit 1/second -j LOG - inet/filter/logdrop-428 -j DROP - inet6/filter/logdrop-428 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-427 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-427 + inet/filter/logdrop-427 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-427 -m limit --limit 1/second -j LOG + inet/filter/logdrop-427 -j DROP + inet6/filter/logdrop-427 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1563 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1269 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1268 inet6/filter/INPUT -i eth0 -j limit-1268 - inet/filter/limit-1268 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-429 - inet6/filter/limit-1268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-429 - inet/filter/logdrop-429 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-429 -m limit --limit 1/second -j LOG - inet/filter/logdrop-429 -j DROP - inet6/filter/logdrop-429 -j DROP + inet/filter/limit-1268 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-428 + inet6/filter/limit-1268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-428 + inet/filter/logdrop-428 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-428 -m limit --limit 1/second -j LOG + inet/filter/logdrop-428 -j DROP + inet6/filter/logdrop-428 -j DROP inet/filter/limit-1268 -m limit --limit 1/second -j LOG inet6/filter/limit-1268 -m limit --limit 1/second -j LOG inet/filter/limit-1268 -j ACCEPT @@ -19476,31 +17217,31 @@ Filter 1563 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1564 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1270 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1269 inet6/filter/INPUT -i eth0 -j limit-1269 - inet/filter/limit-1269 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-430 - inet6/filter/limit-1269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-430 - inet/filter/logdrop-430 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-430 -m limit --limit 1/second -j LOG - inet/filter/logdrop-430 -j DROP - inet6/filter/logdrop-430 -j DROP + inet/filter/limit-1269 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-429 + inet6/filter/limit-1269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-429 + inet/filter/logdrop-429 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-429 -m limit --limit 1/second -j LOG + inet/filter/logdrop-429 -j DROP + inet6/filter/logdrop-429 -j DROP inet/filter/limit-1269 -m limit --limit 1/second -j LOG inet6/filter/limit-1269 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1565 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1271 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1270 inet6/filter/INPUT -i eth0 -j limit-1270 - inet/filter/limit-1270 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-431 - inet6/filter/limit-1270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-431 - inet/filter/logdrop-431 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-431 -m limit --limit 1/second -j LOG - inet/filter/logdrop-431 -j DROP - inet6/filter/logdrop-431 -j DROP + inet/filter/limit-1270 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-430 + inet6/filter/limit-1270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-430 + inet/filter/logdrop-430 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-430 -m limit --limit 1/second -j LOG + inet/filter/logdrop-430 -j DROP + inet6/filter/logdrop-430 -j DROP inet/filter/limit-1270 -j ACCEPT inet6/filter/limit-1270 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -19510,27 +17251,27 @@ Filter 1565 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1566 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1272 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-432 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-432 - inet/filter/logdrop-432 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-432 -m limit --limit 1/second -j LOG - inet/filter/logdrop-432 -j DROP - inet6/filter/logdrop-432 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-431 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-431 + inet/filter/logdrop-431 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-431 -m limit --limit 1/second -j LOG + inet/filter/logdrop-431 -j DROP + inet6/filter/logdrop-431 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1567 {"flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1273 {"flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1272 inet6/filter/INPUT -i eth0 -j limit-1272 - inet/filter/limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-433 - inet6/filter/limit-1272 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-433 - inet/filter/logdrop-433 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-433 -m limit --limit 1/second -j LOG - inet/filter/logdrop-433 -j DROP - inet6/filter/logdrop-433 -j DROP + inet/filter/limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-432 + inet6/filter/limit-1272 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-432 + inet/filter/logdrop-432 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-432 -m limit --limit 1/second -j LOG + inet/filter/logdrop-432 -j DROP + inet6/filter/logdrop-432 -j DROP inet/filter/limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-1272 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -19540,31 +17281,31 @@ Filter 1567 {"flow-limit":{"interval":5,"name":"C"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1568 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1274 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1273 inet6/filter/INPUT -i eth0 -j limit-1273 - inet/filter/limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-434 - inet6/filter/limit-1273 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-434 - inet/filter/logdrop-434 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-434 -m limit --limit 1/second -j LOG - inet/filter/logdrop-434 -j DROP - inet6/filter/logdrop-434 -j DROP + inet/filter/limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-433 + inet6/filter/limit-1273 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-433 + inet/filter/logdrop-433 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-433 -m limit --limit 1/second -j LOG + inet/filter/logdrop-433 -j DROP + inet6/filter/logdrop-433 -j DROP inet/filter/limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-1273 -m recent --name user:C --rsource --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1569 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1275 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1274 inet6/filter/INPUT -i eth0 -j limit-1274 - inet/filter/limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-435 - inet6/filter/limit-1274 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-435 - inet/filter/logdrop-435 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-435 -m limit --limit 1/second -j LOG - inet/filter/logdrop-435 -j DROP - inet6/filter/logdrop-435 -j DROP + inet/filter/limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-434 + inet6/filter/limit-1274 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-434 + inet/filter/logdrop-434 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-434 -m limit --limit 1/second -j LOG + inet/filter/logdrop-434 -j DROP + inet6/filter/logdrop-434 -j DROP inet/filter/limit-1274 -m limit --limit 1/second -j LOG inet6/filter/limit-1274 -m limit --limit 1/second -j LOG inet/filter/limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT @@ -19576,31 +17317,31 @@ Filter 1569 {"flow-limit":{"interval":5,"name":"C"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1570 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1276 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1275 inet6/filter/INPUT -i eth0 -j limit-1275 - inet/filter/limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-436 - inet6/filter/limit-1275 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-436 - inet/filter/logdrop-436 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-436 -m limit --limit 1/second -j LOG - inet/filter/logdrop-436 -j DROP - inet6/filter/logdrop-436 -j DROP + inet/filter/limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-435 + inet6/filter/limit-1275 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-435 + inet/filter/logdrop-435 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-435 -m limit --limit 1/second -j LOG + inet/filter/logdrop-435 -j DROP + inet6/filter/logdrop-435 -j DROP inet/filter/limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-1275 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1571 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1277 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1276 inet6/filter/INPUT -i eth0 -j limit-1276 - inet/filter/limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-437 - inet6/filter/limit-1276 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-437 - inet/filter/logdrop-437 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-437 -m limit --limit 1/second -j LOG - inet/filter/logdrop-437 -j DROP - inet6/filter/logdrop-437 -j DROP + inet/filter/limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-436 + inet6/filter/limit-1276 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-436 + inet/filter/logdrop-436 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-436 -m limit --limit 1/second -j LOG + inet/filter/logdrop-436 -j DROP + inet6/filter/logdrop-436 -j DROP inet/filter/limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-1276 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -19610,31 +17351,31 @@ Filter 1571 {"flow-limit":{"interval":5,"name":"C"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1572 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1278 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1277 inet6/filter/INPUT -i eth0 -j limit-1277 - inet/filter/limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-438 - inet6/filter/limit-1277 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-438 - inet/filter/logdrop-438 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-438 -m limit --limit 1/second -j LOG - inet/filter/logdrop-438 -j DROP - inet6/filter/logdrop-438 -j DROP + inet/filter/limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-437 + inet6/filter/limit-1277 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-437 + inet/filter/logdrop-437 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-437 -m limit --limit 1/second -j LOG + inet/filter/logdrop-437 -j DROP + inet6/filter/logdrop-437 -j DROP inet/filter/limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-1277 -m recent --name user:C --rsource --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1573 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1279 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1278 inet6/filter/INPUT -i eth0 -j limit-1278 - inet/filter/limit-1278 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-439 - inet6/filter/limit-1278 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-439 - inet/filter/logdrop-439 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-439 -m limit --limit 1/second -j LOG - inet/filter/logdrop-439 -j DROP - inet6/filter/logdrop-439 -j DROP + inet/filter/limit-1278 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-438 + inet6/filter/limit-1278 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-438 + inet/filter/logdrop-438 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-438 -m limit --limit 1/second -j LOG + inet/filter/logdrop-438 -j DROP + inet6/filter/logdrop-438 -j DROP inet/filter/limit-1278 -j ACCEPT inet6/filter/limit-1278 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -19644,27 +17385,27 @@ Filter 1573 {"flow-limit":{"interval":5,"name":"C","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1574 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1280 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-440 - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-440 - inet/filter/logdrop-440 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-440 -m limit --limit 1/second -j LOG - inet/filter/logdrop-440 -j DROP - inet6/filter/logdrop-440 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-439 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-439 + inet/filter/logdrop-439 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-439 -m limit --limit 1/second -j LOG + inet/filter/logdrop-439 -j DROP + inet6/filter/logdrop-439 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1575 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1281 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1280 inet6/filter/INPUT -i eth0 -j limit-1280 - inet/filter/limit-1280 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-441 - inet6/filter/limit-1280 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-441 - inet/filter/logdrop-441 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-441 -m limit --limit 1/second -j LOG - inet/filter/logdrop-441 -j DROP - inet6/filter/logdrop-441 -j DROP + inet/filter/limit-1280 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-440 + inet6/filter/limit-1280 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-440 + inet/filter/logdrop-440 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-440 -m limit --limit 1/second -j LOG + inet/filter/logdrop-440 -j DROP + inet6/filter/logdrop-440 -j DROP inet/filter/limit-1280 -m limit --limit 1/second -j LOG inet6/filter/limit-1280 -m limit --limit 1/second -j LOG inet/filter/limit-1280 -j ACCEPT @@ -19676,31 +17417,31 @@ Filter 1575 {"flow-limit":{"interval":5,"name":"C","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1576 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1282 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1281 inet6/filter/INPUT -i eth0 -j limit-1281 - inet/filter/limit-1281 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-442 - inet6/filter/limit-1281 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-442 - inet/filter/logdrop-442 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-442 -m limit --limit 1/second -j LOG - inet/filter/logdrop-442 -j DROP - inet6/filter/logdrop-442 -j DROP + inet/filter/limit-1281 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-441 + inet6/filter/limit-1281 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-441 + inet/filter/logdrop-441 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-441 -m limit --limit 1/second -j LOG + inet/filter/logdrop-441 -j DROP + inet6/filter/logdrop-441 -j DROP inet/filter/limit-1281 -m limit --limit 1/second -j LOG inet6/filter/limit-1281 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1577 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1283 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1282 inet6/filter/INPUT -i eth0 -j limit-1282 - inet/filter/limit-1282 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-443 - inet6/filter/limit-1282 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-443 - inet/filter/logdrop-443 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-443 -m limit --limit 1/second -j LOG - inet/filter/logdrop-443 -j DROP - inet6/filter/logdrop-443 -j DROP + inet/filter/limit-1282 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-442 + inet6/filter/limit-1282 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-442 + inet/filter/logdrop-442 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-442 -m limit --limit 1/second -j LOG + inet/filter/logdrop-442 -j DROP + inet6/filter/logdrop-442 -j DROP inet/filter/limit-1282 -j ACCEPT inet6/filter/limit-1282 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -19710,27 +17451,27 @@ Filter 1577 {"flow-limit":{"interval":5,"name":"C","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1578 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1284 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-444 - inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-444 - inet/filter/logdrop-444 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-444 -m limit --limit 1/second -j LOG - inet/filter/logdrop-444 -j DROP - inet6/filter/logdrop-444 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-443 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-443 + inet/filter/logdrop-443 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-443 -m limit --limit 1/second -j LOG + inet/filter/logdrop-443 -j DROP + inet6/filter/logdrop-443 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1579 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1285 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1284 inet6/filter/INPUT -i eth0 -j limit-1284 - inet/filter/limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-445 - inet6/filter/limit-1284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-445 - inet/filter/logdrop-445 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-445 -m limit --limit 1/second -j LOG - inet/filter/logdrop-445 -j DROP - inet6/filter/logdrop-445 -j DROP + inet/filter/limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-444 + inet6/filter/limit-1284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-444 + inet/filter/logdrop-444 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-444 -m limit --limit 1/second -j LOG + inet/filter/logdrop-444 -j DROP + inet6/filter/logdrop-444 -j DROP inet/filter/limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-1284 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -19740,31 +17481,31 @@ Filter 1579 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1580 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1286 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1285 inet6/filter/INPUT -i eth0 -j limit-1285 - inet/filter/limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-446 - inet6/filter/limit-1285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-446 - inet/filter/logdrop-446 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-446 -m limit --limit 1/second -j LOG - inet/filter/logdrop-446 -j DROP - inet6/filter/logdrop-446 -j DROP + inet/filter/limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-445 + inet6/filter/limit-1285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-445 + inet/filter/logdrop-445 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-445 -m limit --limit 1/second -j LOG + inet/filter/logdrop-445 -j DROP + inet6/filter/logdrop-445 -j DROP inet/filter/limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-1285 -m recent --name user:C --rdest --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1581 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1287 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1286 inet6/filter/INPUT -i eth0 -j limit-1286 - inet/filter/limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-447 - inet6/filter/limit-1286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-447 - inet/filter/logdrop-447 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-447 -m limit --limit 1/second -j LOG - inet/filter/logdrop-447 -j DROP - inet6/filter/logdrop-447 -j DROP + inet/filter/limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-446 + inet6/filter/limit-1286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-446 + inet/filter/logdrop-446 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-446 -m limit --limit 1/second -j LOG + inet/filter/logdrop-446 -j DROP + inet6/filter/logdrop-446 -j DROP inet/filter/limit-1286 -m limit --limit 1/second -j LOG inet6/filter/limit-1286 -m limit --limit 1/second -j LOG inet/filter/limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT @@ -19776,31 +17517,31 @@ Filter 1581 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1582 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1288 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1287 inet6/filter/INPUT -i eth0 -j limit-1287 - inet/filter/limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-448 - inet6/filter/limit-1287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-448 - inet/filter/logdrop-448 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-448 -m limit --limit 1/second -j LOG - inet/filter/logdrop-448 -j DROP - inet6/filter/logdrop-448 -j DROP + inet/filter/limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-447 + inet6/filter/limit-1287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-447 + inet/filter/logdrop-447 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-447 -m limit --limit 1/second -j LOG + inet/filter/logdrop-447 -j DROP + inet6/filter/logdrop-447 -j DROP inet/filter/limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-1287 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1583 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1289 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1288 inet6/filter/INPUT -i eth0 -j limit-1288 - inet/filter/limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-449 - inet6/filter/limit-1288 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-449 - inet/filter/logdrop-449 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-449 -m limit --limit 1/second -j LOG - inet/filter/logdrop-449 -j DROP - inet6/filter/logdrop-449 -j DROP + inet/filter/limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-448 + inet6/filter/limit-1288 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-448 + inet/filter/logdrop-448 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-448 -m limit --limit 1/second -j LOG + inet/filter/logdrop-448 -j DROP + inet6/filter/logdrop-448 -j DROP inet/filter/limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-1288 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -19810,31 +17551,31 @@ Filter 1583 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1584 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1290 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1289 inet6/filter/INPUT -i eth0 -j limit-1289 - inet/filter/limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-450 - inet6/filter/limit-1289 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-450 - inet/filter/logdrop-450 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-450 -m limit --limit 1/second -j LOG - inet/filter/logdrop-450 -j DROP - inet6/filter/logdrop-450 -j DROP + inet/filter/limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-449 + inet6/filter/limit-1289 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-449 + inet/filter/logdrop-449 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-449 -m limit --limit 1/second -j LOG + inet/filter/logdrop-449 -j DROP + inet6/filter/logdrop-449 -j DROP inet/filter/limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-1289 -m recent --name user:C --rdest --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1585 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1291 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1290 inet6/filter/INPUT -i eth0 -j limit-1290 - inet/filter/limit-1290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-451 - inet6/filter/limit-1290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-451 - inet/filter/logdrop-451 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-451 -m limit --limit 1/second -j LOG - inet/filter/logdrop-451 -j DROP - inet6/filter/logdrop-451 -j DROP + inet/filter/limit-1290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-450 + inet6/filter/limit-1290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-450 + inet/filter/logdrop-450 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-450 -m limit --limit 1/second -j LOG + inet/filter/logdrop-450 -j DROP + inet6/filter/logdrop-450 -j DROP inet/filter/limit-1290 -j ACCEPT inet6/filter/limit-1290 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -19844,27 +17585,27 @@ Filter 1585 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1586 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1292 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-452 - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-452 - inet/filter/logdrop-452 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-452 -m limit --limit 1/second -j LOG - inet/filter/logdrop-452 -j DROP - inet6/filter/logdrop-452 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-451 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-451 + inet/filter/logdrop-451 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-451 -m limit --limit 1/second -j LOG + inet/filter/logdrop-451 -j DROP + inet6/filter/logdrop-451 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1587 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1293 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1292 inet6/filter/INPUT -i eth0 -j limit-1292 - inet/filter/limit-1292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-453 - inet6/filter/limit-1292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-453 - inet/filter/logdrop-453 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-453 -m limit --limit 1/second -j LOG - inet/filter/logdrop-453 -j DROP - inet6/filter/logdrop-453 -j DROP + inet/filter/limit-1292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-452 + inet6/filter/limit-1292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-452 + inet/filter/logdrop-452 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-452 -m limit --limit 1/second -j LOG + inet/filter/logdrop-452 -j DROP + inet6/filter/logdrop-452 -j DROP inet/filter/limit-1292 -m limit --limit 1/second -j LOG inet6/filter/limit-1292 -m limit --limit 1/second -j LOG inet/filter/limit-1292 -j ACCEPT @@ -19876,31 +17617,31 @@ Filter 1587 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1588 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1294 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1293 inet6/filter/INPUT -i eth0 -j limit-1293 - inet/filter/limit-1293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-454 - inet6/filter/limit-1293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-454 - inet/filter/logdrop-454 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-454 -m limit --limit 1/second -j LOG - inet/filter/logdrop-454 -j DROP - inet6/filter/logdrop-454 -j DROP + inet/filter/limit-1293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-453 + inet6/filter/limit-1293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-453 + inet/filter/logdrop-453 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-453 -m limit --limit 1/second -j LOG + inet/filter/logdrop-453 -j DROP + inet6/filter/logdrop-453 -j DROP inet/filter/limit-1293 -m limit --limit 1/second -j LOG inet6/filter/limit-1293 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1589 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1295 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1294 inet6/filter/INPUT -i eth0 -j limit-1294 - inet/filter/limit-1294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-455 - inet6/filter/limit-1294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-455 - inet/filter/logdrop-455 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-455 -m limit --limit 1/second -j LOG - inet/filter/logdrop-455 -j DROP - inet6/filter/logdrop-455 -j DROP + inet/filter/limit-1294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-454 + inet6/filter/limit-1294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-454 + inet/filter/logdrop-454 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-454 -m limit --limit 1/second -j LOG + inet/filter/logdrop-454 -j DROP + inet6/filter/logdrop-454 -j DROP inet/filter/limit-1294 -j ACCEPT inet6/filter/limit-1294 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -19910,18 +17651,18 @@ Filter 1589 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1590 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1296 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-456 - inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-456 - inet/filter/logdrop-456 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-456 -m limit --limit 1/second -j LOG - inet/filter/logdrop-456 -j DROP - inet6/filter/logdrop-456 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-455 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-455 + inet/filter/logdrop-455 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-455 -m limit --limit 1/second -j LOG + inet/filter/logdrop-455 -j DROP + inet6/filter/logdrop-455 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1591 {"flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1297 {"flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1296 inet6/filter/INPUT -i eth0 -j limit-1296 @@ -19936,7 +17677,7 @@ Filter 1591 {"flow-limit":{"interval":5,"log":false},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1592 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1298 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1297 inet6/filter/INPUT -i eth0 -j limit-1297 @@ -19947,7 +17688,7 @@ Filter 1592 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1593 {"flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1299 {"flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1298 inet6/filter/INPUT -i eth0 -j limit-1298 @@ -19964,7 +17705,7 @@ Filter 1593 {"flow-limit":{"interval":5,"log":false},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1594 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1300 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1299 inet6/filter/INPUT -i eth0 -j limit-1299 @@ -19975,7 +17716,7 @@ Filter 1594 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1595 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1301 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1300 inet6/filter/INPUT -i eth0 -j limit-1300 @@ -19990,7 +17731,7 @@ Filter 1595 {"flow-limit":{"interval":5,"log":false},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1596 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1302 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1301 inet6/filter/INPUT -i eth0 -j limit-1301 @@ -20001,7 +17742,7 @@ Filter 1596 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1597 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1303 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1302 inet6/filter/INPUT -i eth0 -j limit-1302 @@ -20016,7 +17757,7 @@ Filter 1597 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1598 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1304 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1303 inet6/filter/INPUT -i eth0 -j limit-1303 @@ -20027,7 +17768,7 @@ Filter 1598 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1599 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1305 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1304 inet6/filter/INPUT -i eth0 -j limit-1304 @@ -20044,7 +17785,7 @@ Filter 1599 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1600 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1306 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1305 inet6/filter/INPUT -i eth0 -j limit-1305 @@ -20055,7 +17796,7 @@ Filter 1600 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1601 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1307 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1306 inet6/filter/INPUT -i eth0 -j limit-1306 @@ -20070,7 +17811,7 @@ Filter 1601 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1602 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1308 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1307 inet6/filter/INPUT -i eth0 -j limit-1307 @@ -20081,7 +17822,7 @@ Filter 1602 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1603 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1309 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1308 inet6/filter/INPUT -i eth0 -j limit-1308 @@ -20096,14 +17837,14 @@ Filter 1603 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1604 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1310 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1605 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1311 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1310 inet6/filter/INPUT -i eth0 -j limit-1310 @@ -20120,7 +17861,7 @@ Filter 1605 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1606 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1312 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1311 inet6/filter/INPUT -i eth0 -j limit-1311 @@ -20131,7 +17872,7 @@ Filter 1606 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1607 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1313 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1312 inet6/filter/INPUT -i eth0 -j limit-1312 @@ -20146,14 +17887,14 @@ Filter 1607 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1608 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1314 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1609 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1315 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1314 inet6/filter/INPUT -i eth0 -j limit-1314 @@ -20168,7 +17909,7 @@ Filter 1609 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1610 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1316 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1315 inet6/filter/INPUT -i eth0 -j limit-1315 @@ -20179,7 +17920,7 @@ Filter 1610 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1611 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1317 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1316 inet6/filter/INPUT -i eth0 -j limit-1316 @@ -20196,7 +17937,7 @@ Filter 1611 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1612 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1318 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1317 inet6/filter/INPUT -i eth0 -j limit-1317 @@ -20207,7 +17948,7 @@ Filter 1612 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1613 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1319 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1318 inet6/filter/INPUT -i eth0 -j limit-1318 @@ -20222,7 +17963,7 @@ Filter 1613 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1614 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1320 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1319 inet6/filter/INPUT -i eth0 -j limit-1319 @@ -20233,7 +17974,7 @@ Filter 1614 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1615 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1321 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1320 inet6/filter/INPUT -i eth0 -j limit-1320 @@ -20248,14 +17989,14 @@ Filter 1615 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1616 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1322 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1617 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1323 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1322 inet6/filter/INPUT -i eth0 -j limit-1322 @@ -20272,7 +18013,7 @@ Filter 1617 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1618 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1324 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1323 inet6/filter/INPUT -i eth0 -j limit-1323 @@ -20283,7 +18024,7 @@ Filter 1618 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1619 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1325 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1324 inet6/filter/INPUT -i eth0 -j limit-1324 @@ -20298,14 +18039,14 @@ Filter 1619 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1620 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1326 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1621 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1327 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1326 inet6/filter/INPUT -i eth0 -j limit-1326 @@ -20320,7 +18061,7 @@ Filter 1621 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1622 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1328 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1327 inet6/filter/INPUT -i eth0 -j limit-1327 @@ -20331,7 +18072,7 @@ Filter 1622 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1623 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1329 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1328 inet6/filter/INPUT -i eth0 -j limit-1328 @@ -20348,7 +18089,7 @@ Filter 1623 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1624 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1330 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1329 inet6/filter/INPUT -i eth0 -j limit-1329 @@ -20359,7 +18100,7 @@ Filter 1624 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1625 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1331 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1330 inet6/filter/INPUT -i eth0 -j limit-1330 @@ -20374,7 +18115,7 @@ Filter 1625 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1626 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1332 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1331 inet6/filter/INPUT -i eth0 -j limit-1331 @@ -20385,7 +18126,7 @@ Filter 1626 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1627 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1333 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1332 inet6/filter/INPUT -i eth0 -j limit-1332 @@ -20400,14 +18141,14 @@ Filter 1627 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1628 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1334 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1629 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1335 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1334 inet6/filter/INPUT -i eth0 -j limit-1334 @@ -20424,7 +18165,7 @@ Filter 1629 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1630 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1336 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1335 inet6/filter/INPUT -i eth0 -j limit-1335 @@ -20435,7 +18176,7 @@ Filter 1630 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1631 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1337 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1336 inet6/filter/INPUT -i eth0 -j limit-1336 @@ -20450,14 +18191,14 @@ Filter 1631 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1632 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1338 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1633 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1339 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1338 inet6/filter/INPUT -i eth0 -j limit-1338 @@ -20472,7 +18213,7 @@ Filter 1633 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1634 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1340 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1339 inet6/filter/INPUT -i eth0 -j limit-1339 @@ -20483,7 +18224,7 @@ Filter 1634 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1635 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1341 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1340 inet6/filter/INPUT -i eth0 -j limit-1340 @@ -20500,7 +18241,7 @@ Filter 1635 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1636 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1342 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1341 inet6/filter/INPUT -i eth0 -j limit-1341 @@ -20511,7 +18252,7 @@ Filter 1636 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1637 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1343 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1342 inet6/filter/INPUT -i eth0 -j limit-1342 @@ -20526,7 +18267,7 @@ Filter 1637 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1638 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1344 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1343 inet6/filter/INPUT -i eth0 -j limit-1343 @@ -20537,7 +18278,7 @@ Filter 1638 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1639 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1345 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1344 inet6/filter/INPUT -i eth0 -j limit-1344 @@ -20552,14 +18293,14 @@ Filter 1639 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1640 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1346 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1641 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1347 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1346 inet6/filter/INPUT -i eth0 -j limit-1346 @@ -20576,7 +18317,7 @@ Filter 1641 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1642 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1348 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1347 inet6/filter/INPUT -i eth0 -j limit-1347 @@ -20587,7 +18328,7 @@ Filter 1642 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1643 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1349 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1348 inet6/filter/INPUT -i eth0 -j limit-1348 @@ -20602,14 +18343,14 @@ Filter 1643 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1644 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1350 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1645 {"flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1351 {"flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1350 inet6/filter/INPUT -i eth0 -j limit-1350 @@ -20624,7 +18365,7 @@ Filter 1645 {"flow-limit":{"interval":5,"log":"none"},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1646 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1352 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1351 inet6/filter/INPUT -i eth0 -j limit-1351 @@ -20635,7 +18376,7 @@ Filter 1646 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1647 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1353 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1352 inet6/filter/INPUT -i eth0 -j limit-1352 @@ -20652,7 +18393,7 @@ Filter 1647 {"flow-limit":{"interval":5,"log":"none"},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1648 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1354 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1353 inet6/filter/INPUT -i eth0 -j limit-1353 @@ -20663,7 +18404,7 @@ Filter 1648 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1649 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1355 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1354 inet6/filter/INPUT -i eth0 -j limit-1354 @@ -20678,7 +18419,7 @@ Filter 1649 {"flow-limit":{"interval":5,"log":"none"},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1650 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1356 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1355 inet6/filter/INPUT -i eth0 -j limit-1355 @@ -20689,7 +18430,7 @@ Filter 1650 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1651 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1357 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1356 inet6/filter/INPUT -i eth0 -j limit-1356 @@ -20704,7 +18445,7 @@ Filter 1651 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1652 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1358 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1357 inet6/filter/INPUT -i eth0 -j limit-1357 @@ -20715,7 +18456,7 @@ Filter 1652 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1653 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1359 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1358 inet6/filter/INPUT -i eth0 -j limit-1358 @@ -20732,7 +18473,7 @@ Filter 1653 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1654 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1360 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1359 inet6/filter/INPUT -i eth0 -j limit-1359 @@ -20743,7 +18484,7 @@ Filter 1654 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1655 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1361 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1360 inet6/filter/INPUT -i eth0 -j limit-1360 @@ -20758,7 +18499,7 @@ Filter 1655 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1656 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1362 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1361 inet6/filter/INPUT -i eth0 -j limit-1361 @@ -20769,7 +18510,7 @@ Filter 1656 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1657 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1363 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1362 inet6/filter/INPUT -i eth0 -j limit-1362 @@ -20784,14 +18525,14 @@ Filter 1657 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1658 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1364 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1659 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1365 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1364 inet6/filter/INPUT -i eth0 -j limit-1364 @@ -20808,7 +18549,7 @@ Filter 1659 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1660 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1366 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1365 inet6/filter/INPUT -i eth0 -j limit-1365 @@ -20819,7 +18560,7 @@ Filter 1660 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1661 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1367 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1366 inet6/filter/INPUT -i eth0 -j limit-1366 @@ -20834,14 +18575,14 @@ Filter 1661 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1662 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1368 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1663 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1369 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1368 inet6/filter/INPUT -i eth0 -j limit-1368 @@ -20856,7 +18597,7 @@ Filter 1663 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1664 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1370 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1369 inet6/filter/INPUT -i eth0 -j limit-1369 @@ -20867,7 +18608,7 @@ Filter 1664 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1665 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1371 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1370 inet6/filter/INPUT -i eth0 -j limit-1370 @@ -20884,7 +18625,7 @@ Filter 1665 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1666 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1372 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1371 inet6/filter/INPUT -i eth0 -j limit-1371 @@ -20895,7 +18636,7 @@ Filter 1666 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1667 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1373 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1372 inet6/filter/INPUT -i eth0 -j limit-1372 @@ -20910,7 +18651,7 @@ Filter 1667 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1668 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1374 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1373 inet6/filter/INPUT -i eth0 -j limit-1373 @@ -20921,7 +18662,7 @@ Filter 1668 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1669 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1375 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1374 inet6/filter/INPUT -i eth0 -j limit-1374 @@ -20936,14 +18677,14 @@ Filter 1669 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1670 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1376 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1671 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1377 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1376 inet6/filter/INPUT -i eth0 -j limit-1376 @@ -20960,7 +18701,7 @@ Filter 1671 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1672 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1378 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1377 inet6/filter/INPUT -i eth0 -j limit-1377 @@ -20971,7 +18712,7 @@ Filter 1672 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1673 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1379 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1378 inet6/filter/INPUT -i eth0 -j limit-1378 @@ -20986,14 +18727,14 @@ Filter 1673 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1674 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1380 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1675 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1381 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1380 inet6/filter/INPUT -i eth0 -j limit-1380 @@ -21008,7 +18749,7 @@ Filter 1675 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1676 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1382 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1381 inet6/filter/INPUT -i eth0 -j limit-1381 @@ -21019,7 +18760,7 @@ Filter 1676 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1677 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1383 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1382 inet6/filter/INPUT -i eth0 -j limit-1382 @@ -21036,7 +18777,7 @@ Filter 1677 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1678 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1384 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1383 inet6/filter/INPUT -i eth0 -j limit-1383 @@ -21047,7 +18788,7 @@ Filter 1678 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1679 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1385 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1384 inet6/filter/INPUT -i eth0 -j limit-1384 @@ -21062,7 +18803,7 @@ Filter 1679 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1680 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1386 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1385 inet6/filter/INPUT -i eth0 -j limit-1385 @@ -21073,7 +18814,7 @@ Filter 1680 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1681 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1387 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1386 inet6/filter/INPUT -i eth0 -j limit-1386 @@ -21088,14 +18829,14 @@ Filter 1681 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1682 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1388 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1683 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1389 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1388 inet6/filter/INPUT -i eth0 -j limit-1388 @@ -21112,7 +18853,7 @@ Filter 1683 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1684 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1390 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1389 inet6/filter/INPUT -i eth0 -j limit-1389 @@ -21123,7 +18864,7 @@ Filter 1684 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1685 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1391 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1390 inet6/filter/INPUT -i eth0 -j limit-1390 @@ -21138,14 +18879,14 @@ Filter 1685 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1686 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1392 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1687 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1393 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1392 inet6/filter/INPUT -i eth0 -j limit-1392 @@ -21160,7 +18901,7 @@ Filter 1687 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1688 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1394 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1393 inet6/filter/INPUT -i eth0 -j limit-1393 @@ -21171,7 +18912,7 @@ Filter 1688 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1689 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1395 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1394 inet6/filter/INPUT -i eth0 -j limit-1394 @@ -21188,7 +18929,7 @@ Filter 1689 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1690 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1396 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1395 inet6/filter/INPUT -i eth0 -j limit-1395 @@ -21199,7 +18940,7 @@ Filter 1690 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1691 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1397 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1396 inet6/filter/INPUT -i eth0 -j limit-1396 @@ -21214,7 +18955,7 @@ Filter 1691 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1692 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1398 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1397 inet6/filter/INPUT -i eth0 -j limit-1397 @@ -21225,7 +18966,7 @@ Filter 1692 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1693 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1399 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1398 inet6/filter/INPUT -i eth0 -j limit-1398 @@ -21240,14 +18981,14 @@ Filter 1693 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1694 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1400 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1695 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1401 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1400 inet6/filter/INPUT -i eth0 -j limit-1400 @@ -21264,7 +19005,7 @@ Filter 1695 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1696 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1402 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1401 inet6/filter/INPUT -i eth0 -j limit-1401 @@ -21275,7 +19016,7 @@ Filter 1696 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1697 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1403 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1402 inet6/filter/INPUT -i eth0 -j limit-1402 @@ -21290,14 +19031,14 @@ Filter 1697 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1698 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1404 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1699 {"flow-limit":150,"in":"A","no-track":true,"out":"_fw"} +Filter 1405 {"flow-limit":150,"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1404 inet6/filter/INPUT -i eth0 -j limit-1404 @@ -21314,7 +19055,7 @@ Filter 1699 {"flow-limit":150,"in":"A","no-track":true,"o inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1700 {"action":"pass","flow-limit":150,"in":"A","no-track":true,"out":"_fw"} +Filter 1406 {"action":"pass","flow-limit":150,"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1405 inet6/filter/INPUT -i eth0 -j limit-1405 @@ -21327,16 +19068,16 @@ Filter 1700 {"action":"pass","flow-limit":150,"in":"A","n inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1701 {"flow-limit":150,"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1407 {"flow-limit":150,"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1406 inet6/filter/INPUT -i eth0 -j limit-1406 - inet/filter/limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1406 -j logaccept-77 - inet6/filter/limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1406 -j logaccept-77 - inet/filter/logaccept-77 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-77 -m limit --limit 1/second -j LOG - inet/filter/logaccept-77 -j ACCEPT - inet6/filter/logaccept-77 -j ACCEPT + inet/filter/limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1406 -j logaccept-14 + inet6/filter/limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1406 -j logaccept-14 + inet/filter/logaccept-14 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-14 -m limit --limit 1/second -j LOG + inet/filter/logaccept-14 -j ACCEPT + inet6/filter/logaccept-14 -j ACCEPT inet/filter/limit-1406 -m limit --limit 1/second -j LOG inet6/filter/limit-1406 -m limit --limit 1/second -j LOG inet/filter/limit-1406 -j DROP @@ -21348,7 +19089,7 @@ Filter 1701 {"flow-limit":150,"in":"A","log":true,"no-tra inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1702 {"flow-limit":150,"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1408 {"flow-limit":150,"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1407 inet6/filter/INPUT -i eth0 -j limit-1407 @@ -21365,7 +19106,7 @@ Filter 1702 {"flow-limit":150,"in":"A","log":"none","no-t inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1703 {"flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} +Filter 1409 {"flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1408 inet6/filter/INPUT -i eth0 -j limit-1408 @@ -21382,7 +19123,7 @@ Filter 1703 {"flow-limit":{"count":150},"in":"A","no-trac inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1704 {"action":"pass","flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} +Filter 1410 {"action":"pass","flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1409 inet6/filter/INPUT -i eth0 -j limit-1409 @@ -21395,16 +19136,16 @@ Filter 1704 {"action":"pass","flow-limit":{"count":150}," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1705 {"flow-limit":{"count":150},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1411 {"flow-limit":{"count":150},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1410 inet6/filter/INPUT -i eth0 -j limit-1410 - inet/filter/limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1410 -j logaccept-78 - inet6/filter/limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1410 -j logaccept-78 - inet/filter/logaccept-78 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-78 -m limit --limit 1/second -j LOG - inet/filter/logaccept-78 -j ACCEPT - inet6/filter/logaccept-78 -j ACCEPT + inet/filter/limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1410 -j logaccept-15 + inet6/filter/limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1410 -j logaccept-15 + inet/filter/logaccept-15 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-15 -m limit --limit 1/second -j LOG + inet/filter/logaccept-15 -j ACCEPT + inet6/filter/logaccept-15 -j ACCEPT inet/filter/limit-1410 -m limit --limit 1/second -j LOG inet6/filter/limit-1410 -m limit --limit 1/second -j LOG inet/filter/limit-1410 -j DROP @@ -21416,7 +19157,7 @@ Filter 1705 {"flow-limit":{"count":150},"in":"A","log":tr inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1706 {"flow-limit":{"count":150},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1412 {"flow-limit":{"count":150},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1411 inet6/filter/INPUT -i eth0 -j limit-1411 @@ -21433,7 +19174,7 @@ Filter 1706 {"flow-limit":{"count":150},"in":"A","log":"n inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1707 {"flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1413 {"flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1412 inet6/filter/INPUT -i eth0 -j limit-1412 @@ -21448,7 +19189,7 @@ Filter 1707 {"flow-limit":{"count":150,"log":false},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1708 {"action":"pass","flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1414 {"action":"pass","flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1413 inet6/filter/INPUT -i eth0 -j limit-1413 @@ -21459,16 +19200,16 @@ Filter 1708 {"action":"pass","flow-limit":{"count":150,"l inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1709 {"flow-limit":{"count":150,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1415 {"flow-limit":{"count":150,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1414 inet6/filter/INPUT -i eth0 -j limit-1414 - inet/filter/limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1414 -j logaccept-79 - inet6/filter/limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1414 -j logaccept-79 - inet/filter/logaccept-79 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-79 -m limit --limit 1/second -j LOG - inet/filter/logaccept-79 -j ACCEPT - inet6/filter/logaccept-79 -j ACCEPT + inet/filter/limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1414 -j logaccept-16 + inet6/filter/limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1414 -j logaccept-16 + inet/filter/logaccept-16 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-16 -m limit --limit 1/second -j LOG + inet/filter/logaccept-16 -j ACCEPT + inet6/filter/logaccept-16 -j ACCEPT inet/filter/limit-1414 -j DROP inet6/filter/limit-1414 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -21478,7 +19219,7 @@ Filter 1709 {"flow-limit":{"count":150,"log":false},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1710 {"flow-limit":{"count":150,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1416 {"flow-limit":{"count":150,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1415 inet6/filter/INPUT -i eth0 -j limit-1415 @@ -21493,7 +19234,7 @@ Filter 1710 {"flow-limit":{"count":150,"log":false},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1711 {"flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1417 {"flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1416 inet6/filter/INPUT -i eth0 -j limit-1416 @@ -21508,7 +19249,7 @@ Filter 1711 {"flow-limit":{"count":150,"log":"none"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1712 {"action":"pass","flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1418 {"action":"pass","flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1417 inet6/filter/INPUT -i eth0 -j limit-1417 @@ -21519,16 +19260,16 @@ Filter 1712 {"action":"pass","flow-limit":{"count":150,"l inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1713 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1419 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1418 inet6/filter/INPUT -i eth0 -j limit-1418 - inet/filter/limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1418 -j logaccept-80 - inet6/filter/limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1418 -j logaccept-80 - inet/filter/logaccept-80 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-80 -m limit --limit 1/second -j LOG - inet/filter/logaccept-80 -j ACCEPT - inet6/filter/logaccept-80 -j ACCEPT + inet/filter/limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1418 -j logaccept-17 + inet6/filter/limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1418 -j logaccept-17 + inet/filter/logaccept-17 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-17 -m limit --limit 1/second -j LOG + inet/filter/logaccept-17 -j ACCEPT + inet6/filter/logaccept-17 -j ACCEPT inet/filter/limit-1418 -j DROP inet6/filter/limit-1418 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -21538,7 +19279,7 @@ Filter 1713 {"flow-limit":{"count":150,"log":"none"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1714 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1420 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1419 inet6/filter/INPUT -i eth0 -j limit-1419 @@ -21553,7 +19294,7 @@ Filter 1714 {"flow-limit":{"count":150,"log":"none"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1715 {"flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} +Filter 1421 {"flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1420 inet6/filter/INPUT -i eth0 -j limit-1420 @@ -21570,7 +19311,7 @@ Filter 1715 {"flow-limit":{"count":150,"interval":5},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1716 {"action":"pass","flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} +Filter 1422 {"action":"pass","flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1421 inet6/filter/INPUT -i eth0 -j limit-1421 @@ -21583,16 +19324,16 @@ Filter 1716 {"action":"pass","flow-limit":{"count":150,"i inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1717 {"flow-limit":{"count":150,"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1423 {"flow-limit":{"count":150,"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1422 inet6/filter/INPUT -i eth0 -j limit-1422 - inet/filter/limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1422 -j logaccept-81 - inet6/filter/limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1422 -j logaccept-81 - inet/filter/logaccept-81 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-81 -m limit --limit 1/second -j LOG - inet/filter/logaccept-81 -j ACCEPT - inet6/filter/logaccept-81 -j ACCEPT + inet/filter/limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1422 -j logaccept-18 + inet6/filter/limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1422 -j logaccept-18 + inet/filter/logaccept-18 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-18 -m limit --limit 1/second -j LOG + inet/filter/logaccept-18 -j ACCEPT + inet6/filter/logaccept-18 -j ACCEPT inet/filter/limit-1422 -m limit --limit 1/second -j LOG inet6/filter/limit-1422 -m limit --limit 1/second -j LOG inet/filter/limit-1422 -j DROP @@ -21604,7 +19345,7 @@ Filter 1717 {"flow-limit":{"count":150,"interval":5},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1718 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1424 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1423 inet6/filter/INPUT -i eth0 -j limit-1423 @@ -21621,7 +19362,7 @@ Filter 1718 {"flow-limit":{"count":150,"interval":5},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1719 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1425 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1424 inet6/filter/INPUT -i eth0 -j limit-1424 @@ -21636,7 +19377,7 @@ Filter 1719 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1720 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1426 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1425 inet6/filter/INPUT -i eth0 -j limit-1425 @@ -21647,16 +19388,16 @@ Filter 1720 {"action":"pass","flow-limit":{"count":150,"i inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1721 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1427 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1426 inet6/filter/INPUT -i eth0 -j limit-1426 - inet/filter/limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1426 -j logaccept-82 - inet6/filter/limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1426 -j logaccept-82 - inet/filter/logaccept-82 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-82 -m limit --limit 1/second -j LOG - inet/filter/logaccept-82 -j ACCEPT - inet6/filter/logaccept-82 -j ACCEPT + inet/filter/limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1426 -j logaccept-19 + inet6/filter/limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1426 -j logaccept-19 + inet/filter/logaccept-19 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-19 -m limit --limit 1/second -j LOG + inet/filter/logaccept-19 -j ACCEPT + inet6/filter/logaccept-19 -j ACCEPT inet/filter/limit-1426 -j DROP inet6/filter/limit-1426 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -21666,7 +19407,7 @@ Filter 1721 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1722 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1428 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1427 inet6/filter/INPUT -i eth0 -j limit-1427 @@ -21681,7 +19422,7 @@ Filter 1722 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1723 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1429 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1428 inet6/filter/INPUT -i eth0 -j limit-1428 @@ -21696,7 +19437,7 @@ Filter 1723 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1724 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1430 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1429 inet6/filter/INPUT -i eth0 -j limit-1429 @@ -21707,16 +19448,16 @@ Filter 1724 {"action":"pass","flow-limit":{"count":150,"i inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1725 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1431 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1430 inet6/filter/INPUT -i eth0 -j limit-1430 - inet/filter/limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1430 -j logaccept-83 - inet6/filter/limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1430 -j logaccept-83 - inet/filter/logaccept-83 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-83 -m limit --limit 1/second -j LOG - inet/filter/logaccept-83 -j ACCEPT - inet6/filter/logaccept-83 -j ACCEPT + inet/filter/limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1430 -j logaccept-20 + inet6/filter/limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1430 -j logaccept-20 + inet/filter/logaccept-20 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-20 -m limit --limit 1/second -j LOG + inet/filter/logaccept-20 -j ACCEPT + inet6/filter/logaccept-20 -j ACCEPT inet/filter/limit-1430 -j DROP inet6/filter/limit-1430 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -21726,7 +19467,7 @@ Filter 1725 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1726 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1432 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1431 inet6/filter/INPUT -i eth0 -j limit-1431 @@ -21741,7 +19482,7 @@ Filter 1726 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1727 {"update-limit":"A"} +Filter 1433 {"update-limit":"A"} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set @@ -21750,7 +19491,7 @@ Filter 1727 {"update-limit":"A"} inet/filter/OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1728 {"update-limit":"B"} +Filter 1434 {"update-limit":"B"} (filter-limit) inet/filter/FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set @@ -21759,7 +19500,7 @@ Filter 1728 {"update-limit":"B"} inet/filter/OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1729 {"update-limit":"C"} +Filter 1435 {"update-limit":"C"} (filter-limit) inet/filter/FORWARD -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set @@ -21768,7 +19509,7 @@ Filter 1729 {"update-limit":"C"} inet/filter/OUTPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/OUTPUT -m recent --name user:C --rsource --mask fe00:: --set -Filter 1730 {"update-limit":"D"} +Filter 1436 {"update-limit":"D"} (filter-limit) inet/filter/FORWARD -m recent --name user:D --rsource --mask 255.255.252.0 --set inet/filter/INPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set @@ -21777,7 +19518,7 @@ Filter 1730 {"update-limit":"D"} inet/filter/OUTPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set inet6/filter/OUTPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set -Filter 1731 {"update-limit":{"addr":"src","measure":"conn","name":"A"}} +Filter 1437 {"update-limit":{"addr":"src","measure":"conn","name":"A"}} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set @@ -21786,7 +19527,7 @@ Filter 1731 {"update-limit":{"addr":"src","measure":"conn inet/filter/OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1732 {"update-limit":{"addr":"dest","measure":"conn","name":"A"}} +Filter 1438 {"update-limit":{"addr":"dest","measure":"conn","name":"A"}} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set @@ -21795,7 +19536,7 @@ Filter 1732 {"update-limit":{"addr":"dest","measure":"con inet/filter/OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1733 {"update-limit":{"addr":"src","measure":"flow","name":"A"}} +Filter 1439 {"update-limit":{"addr":"src","measure":"flow","name":"A"}} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set @@ -21804,7 +19545,7 @@ Filter 1733 {"update-limit":{"addr":"src","measure":"flow inet/filter/OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1734 {"update-limit":{"addr":"dest","measure":"flow","name":"A"}} +Filter 1440 {"update-limit":{"addr":"dest","measure":"flow","name":"A"}} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set @@ -21813,7 +19554,7 @@ Filter 1734 {"update-limit":{"addr":"dest","measure":"flo inet/filter/OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1735 {} +Filter 1441 {} (log) inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT @@ -21822,20 +19563,20 @@ Filter 1735 {} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1736 {"action":"drop"} +Filter 1442 {"action":"drop"} (log) - inet/filter/FORWARD -j logdrop-457 - inet6/filter/FORWARD -j logdrop-457 - inet/filter/INPUT -j logdrop-457 - inet6/filter/INPUT -j logdrop-457 - inet/filter/OUTPUT -j logdrop-457 - inet6/filter/OUTPUT -j logdrop-457 - inet/filter/logdrop-457 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-457 -m limit --limit 1/second -j LOG - inet/filter/logdrop-457 -j DROP - inet6/filter/logdrop-457 -j DROP + inet/filter/FORWARD -j logdrop-456 + inet6/filter/FORWARD -j logdrop-456 + inet/filter/INPUT -j logdrop-456 + inet6/filter/INPUT -j logdrop-456 + inet/filter/OUTPUT -j logdrop-456 + inet6/filter/OUTPUT -j logdrop-456 + inet/filter/logdrop-456 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-456 -m limit --limit 1/second -j LOG + inet/filter/logdrop-456 -j DROP + inet6/filter/logdrop-456 -j DROP -Filter 1737 {"action":"pass"} +Filter 1443 {"action":"pass"} (log) inet/filter/FORWARD inet6/filter/FORWARD @@ -21844,7 +19585,7 @@ Filter 1737 {"action":"pass"} inet/filter/OUTPUT inet6/filter/OUTPUT -Filter 1738 {"log":false} +Filter 1444 {"log":false} (log) inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT @@ -21853,7 +19594,7 @@ Filter 1738 {"log":false} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1739 {"action":"drop","log":false} +Filter 1445 {"action":"drop","log":false} (log) inet/filter/FORWARD -j DROP inet6/filter/FORWARD -j DROP @@ -21862,7 +19603,7 @@ Filter 1739 {"action":"drop","log":false} inet/filter/OUTPUT -j DROP inet6/filter/OUTPUT -j DROP -Filter 1740 {"action":"pass","log":false} +Filter 1446 {"action":"pass","log":false} (log) inet/filter/FORWARD inet6/filter/FORWARD @@ -21871,44 +19612,44 @@ Filter 1740 {"action":"pass","log":false} inet/filter/OUTPUT inet6/filter/OUTPUT -Filter 1741 {"log":true} +Filter 1447 {"log":true} (log) - inet/filter/FORWARD -j logaccept-84 - inet6/filter/FORWARD -j logaccept-84 - inet/filter/INPUT -j logaccept-84 - inet6/filter/INPUT -j logaccept-84 - inet/filter/OUTPUT -j logaccept-84 - inet6/filter/OUTPUT -j logaccept-84 - inet/filter/logaccept-84 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-84 -m limit --limit 1/second -j LOG - inet/filter/logaccept-84 -j ACCEPT - inet6/filter/logaccept-84 -j ACCEPT - -Filter 1742 {"action":"drop","log":true} + inet/filter/FORWARD -j logaccept-21 + inet6/filter/FORWARD -j logaccept-21 + inet/filter/INPUT -j logaccept-21 + inet6/filter/INPUT -j logaccept-21 + inet/filter/OUTPUT -j logaccept-21 + inet6/filter/OUTPUT -j logaccept-21 + inet/filter/logaccept-21 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-21 -m limit --limit 1/second -j LOG + inet/filter/logaccept-21 -j ACCEPT + inet6/filter/logaccept-21 -j ACCEPT + +Filter 1448 {"action":"drop","log":true} (log) - inet/filter/FORWARD -j logdrop-458 - inet6/filter/FORWARD -j logdrop-458 - inet/filter/INPUT -j logdrop-458 - inet6/filter/INPUT -j logdrop-458 - inet/filter/OUTPUT -j logdrop-458 - inet6/filter/OUTPUT -j logdrop-458 - inet/filter/logdrop-458 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-458 -m limit --limit 1/second -j LOG - inet/filter/logdrop-458 -j DROP - inet6/filter/logdrop-458 -j DROP - -Filter 1743 {"action":"pass","log":true} + inet/filter/FORWARD -j logdrop-457 + inet6/filter/FORWARD -j logdrop-457 + inet/filter/INPUT -j logdrop-457 + inet6/filter/INPUT -j logdrop-457 + inet/filter/OUTPUT -j logdrop-457 + inet6/filter/OUTPUT -j logdrop-457 + inet/filter/logdrop-457 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-457 -m limit --limit 1/second -j LOG + inet/filter/logdrop-457 -j DROP + inet6/filter/logdrop-457 -j DROP + +Filter 1449 {"action":"pass","log":true} (log) - inet/filter/FORWARD -j logpass-50 - inet6/filter/FORWARD -j logpass-50 - inet/filter/INPUT -j logpass-50 - inet6/filter/INPUT -j logpass-50 - inet/filter/OUTPUT -j logpass-50 - inet6/filter/OUTPUT -j logpass-50 - inet/filter/logpass-50 -m limit --limit 1/second -j LOG - inet6/filter/logpass-50 -m limit --limit 1/second -j LOG - -Filter 1744 {"log":"none"} + inet/filter/FORWARD -j logpass-0 + inet6/filter/FORWARD -j logpass-0 + inet/filter/INPUT -j logpass-0 + inet6/filter/INPUT -j logpass-0 + inet/filter/OUTPUT -j logpass-0 + inet6/filter/OUTPUT -j logpass-0 + inet/filter/logpass-0 -m limit --limit 1/second -j LOG + inet6/filter/logpass-0 -m limit --limit 1/second -j LOG + +Filter 1450 {"log":"none"} (log) inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT @@ -21917,7 +19658,7 @@ Filter 1744 {"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1745 {"action":"drop","log":"none"} +Filter 1451 {"action":"drop","log":"none"} (log) inet/filter/FORWARD -j DROP inet6/filter/FORWARD -j DROP @@ -21926,7 +19667,7 @@ Filter 1745 {"action":"drop","log":"none"} inet/filter/OUTPUT -j DROP inet6/filter/OUTPUT -j DROP -Filter 1746 {"action":"pass","log":"none"} +Filter 1452 {"action":"pass","log":"none"} (log) inet/filter/FORWARD inet6/filter/FORWARD @@ -21935,73 +19676,7 @@ Filter 1746 {"action":"pass","log":"none"} inet/filter/OUTPUT inet6/filter/OUTPUT -Filter 1747 {"in":"_fw","no-track":true,"service":"http"} -(no-track) - inet/filter/OUTPUT -p tcp --dport 80 -j ACCEPT - inet6/filter/OUTPUT -p tcp --dport 80 -j ACCEPT - inet/raw/OUTPUT -p tcp --dport 80 -j CT --notrack - inet6/raw/OUTPUT -p tcp --dport 80 -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack - inet/filter/INPUT -p tcp --sport 80 -j ACCEPT - inet6/filter/INPUT -p tcp --sport 80 -j ACCEPT - -Filter 1748 {"dest":"172.17.0.0\/16","no-track":true,"service":"radius","src":"172.16.0.0\/16"} -(no-track) - inet/filter/FORWARD -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT - inet/filter/INPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT - inet/filter/FORWARD -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT - inet/filter/INPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT - inet/filter/OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT - inet/filter/OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT - inet/raw/PREROUTING -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack - inet/raw/PREROUTING -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack - inet/raw/OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack - inet/raw/OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack - inet/raw/PREROUTING -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack - inet/raw/PREROUTING -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack - inet/raw/OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack - inet/raw/OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack - inet/filter/FORWARD -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT - inet/filter/INPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT - inet/filter/FORWARD -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT - inet/filter/INPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT - inet/filter/OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT - inet/filter/OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT - -Filter 1749 {"dest":"172.18.0.0\/16","no-track":true,"service":"ssh"} -(no-track) - inet/filter/FORWARD -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT - inet/filter/INPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT - inet/filter/OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT - inet/raw/PREROUTING -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack - inet/raw/OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack - inet/raw/PREROUTING -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack - inet/raw/OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack - inet/filter/FORWARD -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT - inet/filter/INPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT - inet/filter/OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT - -Filter 1750 {"no-track":true,"out":"_fw","service":"ipsec"} -(no-track) - inet/filter/INPUT -p esp -j ACCEPT - inet6/filter/INPUT -p esp -j ACCEPT - inet/filter/INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT - inet6/filter/INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack - inet/raw/PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack - inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack - inet/raw/OUTPUT -p esp -j CT --notrack - inet6/raw/OUTPUT -p esp -j CT --notrack - inet/raw/OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack - inet6/raw/OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack - inet/filter/OUTPUT -p esp -j ACCEPT - inet6/filter/OUTPUT -p esp -j ACCEPT - inet/filter/OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT - inet6/filter/OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT - -Filter 1751 {"in":["_fw","A"]} +Filter 1453 {"in":["_fw","A"]} (zone) inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT @@ -22010,12 +19685,12 @@ Filter 1751 {"in":["_fw","A"]} inet/filter/INPUT -i eth0 -j ACCEPT inet6/filter/INPUT -i eth0 -j ACCEPT -Filter 1752 {"in":"B","out":"C"} +Filter 1454 {"in":"B","out":"C"} (zone) inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT -Filter 1753 {"out":["_fw","B"]} +Filter 1455 {"out":["_fw","B"]} (zone) inet/filter/INPUT -j ACCEPT inet6/filter/INPUT -j ACCEPT @@ -22024,7 +19699,7 @@ Filter 1753 {"out":["_fw","B"]} inet6/filter/FORWARD -o eth1 -d fc00::/7 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -Filter 1754 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} +Filter 1456 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} (zone) inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT @@ -22368,134 +20043,6 @@ hash:net family inet :FORWARD DROP [0:0] :INPUT DROP [0:0] :OUTPUT DROP [0:0] -:address-0 - [0:0] -:address-1 - [0:0] -:address-10 - [0:0] -:address-100 - [0:0] -:address-101 - [0:0] -:address-102 - [0:0] -:address-103 - [0:0] -:address-104 - [0:0] -:address-105 - [0:0] -:address-106 - [0:0] -:address-107 - [0:0] -:address-108 - [0:0] -:address-109 - [0:0] -:address-11 - [0:0] -:address-110 - [0:0] -:address-111 - [0:0] -:address-112 - [0:0] -:address-113 - [0:0] -:address-114 - [0:0] -:address-115 - [0:0] -:address-116 - [0:0] -:address-117 - [0:0] -:address-118 - [0:0] -:address-119 - [0:0] -:address-12 - [0:0] -:address-120 - [0:0] -:address-121 - [0:0] -:address-122 - [0:0] -:address-123 - [0:0] -:address-124 - [0:0] -:address-125 - [0:0] -:address-126 - [0:0] -:address-127 - [0:0] -:address-13 - [0:0] -:address-14 - [0:0] -:address-15 - [0:0] -:address-16 - [0:0] -:address-17 - [0:0] -:address-18 - [0:0] -:address-19 - [0:0] -:address-2 - [0:0] -:address-20 - [0:0] -:address-21 - [0:0] -:address-22 - [0:0] -:address-23 - [0:0] -:address-24 - [0:0] -:address-25 - [0:0] -:address-26 - [0:0] -:address-27 - [0:0] -:address-28 - [0:0] -:address-29 - [0:0] -:address-3 - [0:0] -:address-30 - [0:0] -:address-31 - [0:0] -:address-32 - [0:0] -:address-33 - [0:0] -:address-34 - [0:0] -:address-35 - [0:0] -:address-36 - [0:0] -:address-37 - [0:0] -:address-38 - [0:0] -:address-39 - [0:0] -:address-4 - [0:0] -:address-40 - [0:0] -:address-41 - [0:0] -:address-42 - [0:0] -:address-43 - [0:0] -:address-44 - [0:0] -:address-45 - [0:0] -:address-46 - [0:0] -:address-47 - [0:0] -:address-48 - [0:0] -:address-49 - [0:0] -:address-5 - [0:0] -:address-50 - [0:0] -:address-51 - [0:0] -:address-52 - [0:0] -:address-53 - [0:0] -:address-54 - [0:0] -:address-55 - [0:0] -:address-56 - [0:0] -:address-57 - [0:0] -:address-58 - [0:0] -:address-59 - [0:0] -:address-6 - [0:0] -:address-60 - [0:0] -:address-61 - [0:0] -:address-62 - [0:0] -:address-63 - [0:0] -:address-64 - [0:0] -:address-65 - [0:0] -:address-66 - [0:0] -:address-67 - [0:0] -:address-68 - [0:0] -:address-69 - [0:0] -:address-7 - [0:0] -:address-70 - [0:0] -:address-71 - [0:0] -:address-72 - [0:0] -:address-73 - [0:0] -:address-74 - [0:0] -:address-75 - [0:0] -:address-76 - [0:0] -:address-77 - [0:0] -:address-78 - [0:0] -:address-79 - [0:0] -:address-8 - [0:0] -:address-80 - [0:0] -:address-81 - [0:0] -:address-82 - [0:0] -:address-83 - [0:0] -:address-84 - [0:0] -:address-85 - [0:0] -:address-86 - [0:0] -:address-87 - [0:0] -:address-88 - [0:0] -:address-89 - [0:0] -:address-9 - [0:0] -:address-90 - [0:0] -:address-91 - [0:0] -:address-92 - [0:0] -:address-93 - [0:0] -:address-94 - [0:0] -:address-95 - [0:0] -:address-96 - [0:0] -:address-97 - [0:0] -:address-98 - [0:0] -:address-99 - [0:0] :icmp-routing - [0:0] :limit-0 - [0:0] :limit-1 - [0:0] @@ -23848,75 +21395,12 @@ hash:net family inet :logaccept-2 - [0:0] :logaccept-20 - [0:0] :logaccept-21 - [0:0] -:logaccept-22 - [0:0] -:logaccept-23 - [0:0] -:logaccept-24 - [0:0] -:logaccept-25 - [0:0] -:logaccept-26 - [0:0] -:logaccept-27 - [0:0] -:logaccept-28 - [0:0] -:logaccept-29 - [0:0] :logaccept-3 - [0:0] -:logaccept-30 - [0:0] -:logaccept-31 - [0:0] -:logaccept-32 - [0:0] -:logaccept-33 - [0:0] -:logaccept-34 - [0:0] -:logaccept-35 - [0:0] -:logaccept-36 - [0:0] -:logaccept-37 - [0:0] -:logaccept-38 - [0:0] -:logaccept-39 - [0:0] :logaccept-4 - [0:0] -:logaccept-40 - [0:0] -:logaccept-41 - [0:0] -:logaccept-42 - [0:0] -:logaccept-43 - [0:0] -:logaccept-44 - [0:0] -:logaccept-45 - [0:0] -:logaccept-46 - [0:0] -:logaccept-47 - [0:0] -:logaccept-48 - [0:0] -:logaccept-49 - [0:0] :logaccept-5 - [0:0] -:logaccept-50 - [0:0] -:logaccept-51 - [0:0] -:logaccept-52 - [0:0] -:logaccept-53 - [0:0] -:logaccept-54 - [0:0] -:logaccept-55 - [0:0] -:logaccept-56 - [0:0] -:logaccept-57 - [0:0] -:logaccept-58 - [0:0] -:logaccept-59 - [0:0] :logaccept-6 - [0:0] -:logaccept-60 - [0:0] -:logaccept-61 - [0:0] -:logaccept-62 - [0:0] -:logaccept-63 - [0:0] -:logaccept-64 - [0:0] -:logaccept-65 - [0:0] -:logaccept-66 - [0:0] -:logaccept-67 - [0:0] -:logaccept-68 - [0:0] -:logaccept-69 - [0:0] :logaccept-7 - [0:0] -:logaccept-70 - [0:0] -:logaccept-71 - [0:0] -:logaccept-72 - [0:0] -:logaccept-73 - [0:0] -:logaccept-74 - [0:0] -:logaccept-75 - [0:0] -:logaccept-76 - [0:0] -:logaccept-77 - [0:0] -:logaccept-78 - [0:0] -:logaccept-79 - [0:0] :logaccept-8 - [0:0] -:logaccept-80 - [0:0] -:logaccept-81 - [0:0] -:logaccept-82 - [0:0] -:logaccept-83 - [0:0] -:logaccept-84 - [0:0] :logaccept-9 - [0:0] :logaccept-final-0 - [0:0] :logaccept-final-1 - [0:0] @@ -24379,7 +21863,6 @@ hash:net family inet :logdrop-455 - [0:0] :logdrop-456 - [0:0] :logdrop-457 - [0:0] -:logdrop-458 - [0:0] :logdrop-46 - [0:0] :logdrop-47 - [0:0] :logdrop-48 - [0:0] @@ -24440,59 +21923,6 @@ hash:net family inet :logdrop-98 - [0:0] :logdrop-99 - [0:0] :logpass-0 - [0:0] -:logpass-1 - [0:0] -:logpass-10 - [0:0] -:logpass-11 - [0:0] -:logpass-12 - [0:0] -:logpass-13 - [0:0] -:logpass-14 - [0:0] -:logpass-15 - [0:0] -:logpass-16 - [0:0] -:logpass-17 - [0:0] -:logpass-18 - [0:0] -:logpass-19 - [0:0] -:logpass-2 - [0:0] -:logpass-20 - [0:0] -:logpass-21 - [0:0] -:logpass-22 - [0:0] -:logpass-23 - [0:0] -:logpass-24 - [0:0] -:logpass-25 - [0:0] -:logpass-26 - [0:0] -:logpass-27 - [0:0] -:logpass-28 - [0:0] -:logpass-29 - [0:0] -:logpass-3 - [0:0] -:logpass-30 - [0:0] -:logpass-31 - [0:0] -:logpass-32 - [0:0] -:logpass-33 - [0:0] -:logpass-34 - [0:0] -:logpass-35 - [0:0] -:logpass-36 - [0:0] -:logpass-37 - [0:0] -:logpass-38 - [0:0] -:logpass-39 - [0:0] -:logpass-4 - [0:0] -:logpass-40 - [0:0] -:logpass-41 - [0:0] -:logpass-42 - [0:0] -:logpass-43 - [0:0] -:logpass-44 - [0:0] -:logpass-45 - [0:0] -:logpass-46 - [0:0] -:logpass-47 - [0:0] -:logpass-48 - [0:0] -:logpass-49 - [0:0] -:logpass-5 - [0:0] -:logpass-50 - [0:0] -:logpass-6 - [0:0] -:logpass-7 - [0:0] -:logpass-8 - [0:0] -:logpass-9 - [0:0] -:logreject-0 - [0:0] -:logtarpit-0 - [0:0] -:tarpit - [0:0] -A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set -A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set -A FORWARD -j limit-1073 @@ -24854,452 +22284,6 @@ hash:net family inet -A FORWARD -j limit-717 -A FORWARD -j limit-716 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD --A FORWARD -j logaccept-0 --A FORWARD -j logpass-0 --A FORWARD -d 172.16.0.0/16 -j ACCEPT --A FORWARD -d 172.16.0.0/16 --A FORWARD -d 172.16.0.0/16 -j logaccept-1 --A FORWARD -d 172.16.0.0/16 -j logpass-1 --A FORWARD -d 172.16.0.0/16 -j ACCEPT --A FORWARD -d 172.16.2.0/16 -j ACCEPT --A FORWARD -d 172.16.0.0/16 --A FORWARD -d 172.16.2.0/16 --A FORWARD -d 172.16.0.0/16 -j logaccept-2 --A FORWARD -d 172.16.2.0/16 -j logaccept-2 --A FORWARD -d 172.16.0.0/16 -j logpass-2 --A FORWARD -d 172.16.2.0/16 -j logpass-2 --A FORWARD -s 10.0.0.1 -j ACCEPT --A FORWARD -s 10.0.0.1 --A FORWARD -s 10.0.0.1 -j logaccept-3 --A FORWARD -s 10.0.0.1 -j logpass-3 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 --A FORWARD -s 10.0.0.1 -j ACCEPT --A FORWARD -s 10.0.0.2 -j ACCEPT --A FORWARD -s 10.0.0.1 --A FORWARD -s 10.0.0.2 --A FORWARD -s 10.0.0.1 -j logaccept-6 --A FORWARD -s 10.0.0.2 -j logaccept-6 --A FORWARD -s 10.0.0.1 -j logpass-6 --A FORWARD -s 10.0.0.2 -j logpass-6 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 --A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 --A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 --A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -o eth1 -d 10.0.0.0/12 --A FORWARD -o eth1 -d 10.0.0.0/12 -j logaccept-9 --A FORWARD -o eth1 -d 10.0.0.0/12 -j logpass-9 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-0 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-1 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-2 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-3 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-4 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-5 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-6 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-7 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-8 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-9 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-10 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-11 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-12 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-13 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-14 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-15 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-16 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-17 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-18 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-19 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-20 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-21 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-22 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-23 --A FORWARD -i eth0 -j ACCEPT --A FORWARD -i eth0 --A FORWARD -i eth0 -j logaccept-18 --A FORWARD -i eth0 -j logpass-16 --A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -d 172.16.0.0/16 --A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-19 --A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-17 --A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth0 -d 172.16.0.0/16 --A FORWARD -i eth0 -d 172.16.2.0/16 --A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-20 --A FORWARD -i eth0 -d 172.16.2.0/16 -j logaccept-20 --A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-18 --A FORWARD -i eth0 -d 172.16.2.0/16 -j logpass-18 --A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 --A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-21 --A FORWARD -i eth0 -s 10.0.0.1 -j logpass-19 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 --A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.2 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 --A FORWARD -i eth0 -s 10.0.0.2 --A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-24 --A FORWARD -i eth0 -s 10.0.0.2 -j logaccept-24 --A FORWARD -i eth0 -s 10.0.0.1 -j logpass-22 --A FORWARD -i eth0 -s 10.0.0.2 -j logpass-22 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j logaccept-27 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-24 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-25 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-26 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-27 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-28 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-29 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-30 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-31 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-30 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-32 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-33 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-34 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-35 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-36 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-37 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-38 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-39 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-33 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-33 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-27 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-27 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-40 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-41 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-42 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-43 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-44 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-45 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-46 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-47 --A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 --A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-36 --A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-30 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-48 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-49 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-50 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-51 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-52 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-53 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-54 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-55 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-56 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-57 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-58 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-59 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-60 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-61 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-62 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-63 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-64 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-65 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-66 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-67 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-68 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-69 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-70 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-71 --A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 --A FORWARD -i eth2 -s 10.1.0.0/12 --A FORWARD -i eth3 -s 10.1.0.0/12 --A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-45 --A FORWARD -i eth2 -s 10.1.0.0/12 -j logaccept-45 --A FORWARD -i eth3 -s 10.1.0.0/12 -j logaccept-45 --A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-37 --A FORWARD -i eth2 -s 10.1.0.0/12 -j logpass-37 --A FORWARD -i eth3 -s 10.1.0.0/12 -j logpass-37 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-72 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-72 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-72 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-73 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-73 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-73 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-74 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-74 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-74 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-75 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-75 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-75 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-76 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-76 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-76 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-77 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-77 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-77 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-78 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-78 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-78 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-79 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-79 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-79 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-80 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-80 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-80 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-81 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-81 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-81 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-82 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-82 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-82 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-83 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-83 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-83 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-84 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-84 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-84 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-85 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-85 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-85 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-86 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-86 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-86 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-87 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-87 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-87 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-88 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-88 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-88 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-89 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-89 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-89 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-90 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-90 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-90 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-91 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-91 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-91 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-92 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-92 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-92 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-93 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-93 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-93 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-94 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-94 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-94 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-95 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-95 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-95 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logdrop-0 --A FORWARD --A FORWARD -j logreject-0 --A FORWARD -j logtarpit-0 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-0 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-1 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-2 @@ -25851,23 +22835,17 @@ hash:net family inet -A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set -A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set -A FORWARD -j ACCEPT --A FORWARD -j logdrop-457 +-A FORWARD -j logdrop-456 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-84 --A FORWARD -j logdrop-458 --A FORWARD -j logpass-50 +-A FORWARD -j logaccept-21 +-A FORWARD -j logdrop-457 +-A FORWARD -j logpass-0 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A FORWARD -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A FORWARD -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A FORWARD -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A FORWARD -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT --A FORWARD -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT -A FORWARD -i eth0 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT @@ -26281,300 +23259,6 @@ hash:net family inet -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT --A INPUT --A INPUT -j logaccept-0 --A INPUT -j logpass-0 --A INPUT -d 172.16.0.0/16 -j ACCEPT --A INPUT -d 172.16.0.0/16 --A INPUT -d 172.16.0.0/16 -j logaccept-1 --A INPUT -d 172.16.0.0/16 -j logpass-1 --A INPUT -d 172.16.0.0/16 -j ACCEPT --A INPUT -d 172.16.2.0/16 -j ACCEPT --A INPUT -d 172.16.0.0/16 --A INPUT -d 172.16.2.0/16 --A INPUT -d 172.16.0.0/16 -j logaccept-2 --A INPUT -d 172.16.2.0/16 -j logaccept-2 --A INPUT -d 172.16.0.0/16 -j logpass-2 --A INPUT -d 172.16.2.0/16 -j logpass-2 --A INPUT -s 10.0.0.1 -j ACCEPT --A INPUT -s 10.0.0.1 --A INPUT -s 10.0.0.1 -j logaccept-3 --A INPUT -s 10.0.0.1 -j logpass-3 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 --A INPUT -s 10.0.0.1 -j ACCEPT --A INPUT -s 10.0.0.2 -j ACCEPT --A INPUT -s 10.0.0.1 --A INPUT -s 10.0.0.2 --A INPUT -s 10.0.0.1 -j logaccept-6 --A INPUT -s 10.0.0.2 -j logaccept-6 --A INPUT -s 10.0.0.1 -j logpass-6 --A INPUT -s 10.0.0.2 -j logpass-6 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 --A INPUT -s 10.0.0.2 -d 172.16.2.0/16 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 --A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 --A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 --A INPUT -i eth0 -j ACCEPT --A INPUT -i eth0 --A INPUT -i eth0 -j logaccept-18 --A INPUT -i eth0 -j logpass-16 --A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -d 172.16.0.0/16 --A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-19 --A INPUT -i eth0 -d 172.16.0.0/16 -j logpass-17 --A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth0 -d 172.16.0.0/16 --A INPUT -i eth0 -d 172.16.2.0/16 --A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-20 --A INPUT -i eth0 -d 172.16.2.0/16 -j logaccept-20 --A INPUT -i eth0 -d 172.16.0.0/16 -j logpass-18 --A INPUT -i eth0 -d 172.16.2.0/16 -j logpass-18 --A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 --A INPUT -i eth0 -s 10.0.0.1 -j logaccept-21 --A INPUT -i eth0 -s 10.0.0.1 -j logpass-19 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 --A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.2 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 --A INPUT -i eth0 -s 10.0.0.2 --A INPUT -i eth0 -s 10.0.0.1 -j logaccept-24 --A INPUT -i eth0 -s 10.0.0.2 -j logaccept-24 --A INPUT -i eth0 -s 10.0.0.1 -j logpass-22 --A INPUT -i eth0 -s 10.0.0.2 -j logpass-22 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 --A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 --A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-36 --A INPUT -i eth1 -s 10.0.0.0/12 -j logpass-30 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-48 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-49 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-50 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-51 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-52 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-53 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-54 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-55 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-56 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-57 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-58 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-59 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-60 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-61 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-62 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-63 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-64 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-65 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-66 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-67 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-68 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-69 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-70 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-71 --A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT --A INPUT -i eth2 -s 10.1.0.0/12 -j ACCEPT --A INPUT -i eth3 -s 10.1.0.0/12 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 --A INPUT -i eth2 -s 10.1.0.0/12 --A INPUT -i eth3 -s 10.1.0.0/12 --A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-45 --A INPUT -i eth2 -s 10.1.0.0/12 -j logaccept-45 --A INPUT -i eth3 -s 10.1.0.0/12 -j logaccept-45 --A INPUT -i eth1 -s 10.0.0.0/12 -j logpass-37 --A INPUT -i eth2 -s 10.1.0.0/12 -j logpass-37 --A INPUT -i eth3 -s 10.1.0.0/12 -j logpass-37 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-72 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-72 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-72 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-73 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-73 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-73 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-74 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-74 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-74 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-75 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-75 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-75 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-76 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-76 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-76 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-77 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-77 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-77 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-78 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-78 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-78 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-79 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-79 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-79 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-80 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-80 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-80 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-81 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-81 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-81 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-82 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-82 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-82 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-83 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-83 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-83 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-84 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-84 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-84 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-85 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-85 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-85 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-86 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-86 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-86 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-87 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-87 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-87 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-88 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-88 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-88 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-89 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-89 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-89 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-90 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-90 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-90 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-91 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-91 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-91 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-92 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-92 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-92 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-93 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-93 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-93 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-94 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-94 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-94 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-95 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-95 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-95 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logdrop-0 --A INPUT --A INPUT -j logreject-0 --A INPUT -j logtarpit-0 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-0 -A INPUT -j ACCEPT -A INPUT -j ACCEPT @@ -26779,11 +23463,11 @@ hash:net family inet -A INPUT -i eth0 -j limit-1090 -A INPUT -i eth0 -j limit-1091 -A INPUT -i eth0 -j limit-1092 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-362 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-361 -A INPUT -i eth0 -j limit-1094 -A INPUT -i eth0 -j limit-1095 -A INPUT -i eth0 -j limit-1096 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-366 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-365 -A INPUT -i eth0 -j limit-1098 -A INPUT -i eth0 -j limit-1099 -A INPUT -i eth0 -j limit-1100 @@ -26791,11 +23475,11 @@ hash:net family inet -A INPUT -i eth0 -j limit-1102 -A INPUT -i eth0 -j limit-1103 -A INPUT -i eth0 -j limit-1104 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-374 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-373 -A INPUT -i eth0 -j limit-1106 -A INPUT -i eth0 -j limit-1107 -A INPUT -i eth0 -j limit-1108 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-378 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-377 -A INPUT -i eth0 -j limit-1110 -A INPUT -i eth0 -j limit-1111 -A INPUT -i eth0 -j limit-1112 @@ -26803,11 +23487,11 @@ hash:net family inet -A INPUT -i eth0 -j limit-1114 -A INPUT -i eth0 -j limit-1115 -A INPUT -i eth0 -j limit-1116 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-386 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-385 -A INPUT -i eth0 -j limit-1118 -A INPUT -i eth0 -j limit-1119 -A INPUT -i eth0 -j limit-1120 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-390 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-389 -A INPUT -i eth0 -j limit-1122 -A INPUT -i eth0 -j limit-1123 -A INPUT -i eth0 -j limit-1124 @@ -26815,11 +23499,11 @@ hash:net family inet -A INPUT -i eth0 -j limit-1126 -A INPUT -i eth0 -j limit-1127 -A INPUT -i eth0 -j limit-1128 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-398 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-397 -A INPUT -i eth0 -j limit-1130 -A INPUT -i eth0 -j limit-1131 -A INPUT -i eth0 -j limit-1132 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-402 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-401 -A INPUT -i eth0 -j limit-1134 -A INPUT -i eth0 -j limit-1135 -A INPUT -i eth0 -j limit-1136 @@ -26941,11 +23625,11 @@ hash:net family inet -A INPUT -i eth0 -j limit-1252 -A INPUT -i eth0 -j limit-1253 -A INPUT -i eth0 -j limit-1254 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-416 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-415 -A INPUT -i eth0 -j limit-1256 -A INPUT -i eth0 -j limit-1257 -A INPUT -i eth0 -j limit-1258 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-420 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-419 -A INPUT -i eth0 -j limit-1260 -A INPUT -i eth0 -j limit-1261 -A INPUT -i eth0 -j limit-1262 @@ -26953,11 +23637,11 @@ hash:net family inet -A INPUT -i eth0 -j limit-1264 -A INPUT -i eth0 -j limit-1265 -A INPUT -i eth0 -j limit-1266 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-428 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-427 -A INPUT -i eth0 -j limit-1268 -A INPUT -i eth0 -j limit-1269 -A INPUT -i eth0 -j limit-1270 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-432 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-431 -A INPUT -i eth0 -j limit-1272 -A INPUT -i eth0 -j limit-1273 -A INPUT -i eth0 -j limit-1274 @@ -26965,11 +23649,11 @@ hash:net family inet -A INPUT -i eth0 -j limit-1276 -A INPUT -i eth0 -j limit-1277 -A INPUT -i eth0 -j limit-1278 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-440 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-439 -A INPUT -i eth0 -j limit-1280 -A INPUT -i eth0 -j limit-1281 -A INPUT -i eth0 -j limit-1282 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-444 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-443 -A INPUT -i eth0 -j limit-1284 -A INPUT -i eth0 -j limit-1285 -A INPUT -i eth0 -j limit-1286 @@ -26977,11 +23661,11 @@ hash:net family inet -A INPUT -i eth0 -j limit-1288 -A INPUT -i eth0 -j limit-1289 -A INPUT -i eth0 -j limit-1290 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-452 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-451 -A INPUT -i eth0 -j limit-1292 -A INPUT -i eth0 -j limit-1293 -A INPUT -i eth0 -j limit-1294 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-456 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-455 -A INPUT -i eth0 -j limit-1296 -A INPUT -i eth0 -j limit-1297 -A INPUT -i eth0 -j limit-1298 @@ -27125,26 +23809,17 @@ hash:net family inet -A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A INPUT -j ACCEPT --A INPUT -j logdrop-457 +-A INPUT -j logdrop-456 -A INPUT -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-84 --A INPUT -j logdrop-458 --A INPUT -j logpass-50 +-A INPUT -j logaccept-21 +-A INPUT -j logdrop-457 +-A INPUT -j logpass-0 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -p tcp --sport 80 -j ACCEPT --A INPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A INPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A INPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A INPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A INPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT --A INPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT --A INPUT -p esp -j ACCEPT --A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmp -j icmp-routing @@ -27510,116 +24185,6 @@ hash:net family inet -A OUTPUT -j limit-716 -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT --A OUTPUT -j logaccept-0 --A OUTPUT -j logpass-0 --A OUTPUT -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -d 172.16.0.0/16 --A OUTPUT -d 172.16.0.0/16 -j logaccept-1 --A OUTPUT -d 172.16.0.0/16 -j logpass-1 --A OUTPUT -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -d 172.16.2.0/16 -j ACCEPT --A OUTPUT -d 172.16.0.0/16 --A OUTPUT -d 172.16.2.0/16 --A OUTPUT -d 172.16.0.0/16 -j logaccept-2 --A OUTPUT -d 172.16.2.0/16 -j logaccept-2 --A OUTPUT -d 172.16.0.0/16 -j logpass-2 --A OUTPUT -d 172.16.2.0/16 -j logpass-2 --A OUTPUT -s 10.0.0.1 -j ACCEPT --A OUTPUT -s 10.0.0.1 --A OUTPUT -s 10.0.0.1 -j logaccept-3 --A OUTPUT -s 10.0.0.1 -j logpass-3 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 --A OUTPUT -s 10.0.0.1 -j ACCEPT --A OUTPUT -s 10.0.0.2 -j ACCEPT --A OUTPUT -s 10.0.0.1 --A OUTPUT -s 10.0.0.2 --A OUTPUT -s 10.0.0.1 -j logaccept-6 --A OUTPUT -s 10.0.0.2 -j logaccept-6 --A OUTPUT -s 10.0.0.1 -j logpass-6 --A OUTPUT -s 10.0.0.2 -j logpass-6 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 --A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 --A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j logaccept-9 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j logpass-9 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-0 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-1 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-2 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-3 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-4 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-5 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-6 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-7 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-8 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-9 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-10 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-11 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-12 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-13 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-14 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-15 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-16 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-17 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-18 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-19 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-20 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-21 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-22 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-23 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-0 --A OUTPUT --A OUTPUT -j logreject-0 --A OUTPUT -j logtarpit-0 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-0 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-2 @@ -27997,11 +24562,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-374 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-375 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-376 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-378 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-379 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-380 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-138 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-137 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-382 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-383 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-384 @@ -28009,11 +24574,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-386 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-387 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-388 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-390 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-391 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-392 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-150 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-394 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-395 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-396 @@ -28021,11 +24586,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-398 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-399 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-400 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-158 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-157 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-402 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-403 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-404 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-162 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-406 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-407 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-408 @@ -28033,11 +24598,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-410 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-411 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-412 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-170 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-414 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-415 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-416 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-174 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-173 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-418 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-419 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-420 @@ -28159,11 +24724,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-536 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-537 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-538 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-540 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-541 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-542 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-192 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-544 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-545 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-546 @@ -28171,11 +24736,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-548 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-549 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-550 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-199 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-552 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-553 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-554 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-204 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-556 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-557 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-558 @@ -28183,11 +24748,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-560 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-561 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-562 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-212 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-211 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-564 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-565 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-566 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-216 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-215 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-568 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-569 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-570 @@ -28195,11 +24760,11 @@ hash:net family inet -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-572 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-573 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-574 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-224 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-576 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-577 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-578 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-228 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-227 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-580 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-581 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-582 @@ -28715,289 +25280,28 @@ hash:net family inet -A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-457 +-A OUTPUT -j logdrop-456 -A OUTPUT -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-84 --A OUTPUT -j logdrop-458 --A OUTPUT -j logpass-50 +-A OUTPUT -j logaccept-21 +-A OUTPUT -j logdrop-457 +-A OUTPUT -j logpass-0 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -p tcp --dport 80 -j ACCEPT --A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT --A OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT --A OUTPUT -p esp -j ACCEPT --A OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT -A OUTPUT -p icmp -j icmp-routing --A address-0 -d 172.16.0.0/16 -j ACCEPT --A address-1 -d 172.16.0.0/16 --A address-10 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-13 --A address-100 -d 172.16.0.0/16 -j ACCEPT --A address-100 -d 172.16.2.0/16 -j ACCEPT --A address-101 -d 172.16.0.0/16 --A address-101 -d 172.16.2.0/16 --A address-102 -d 172.16.0.0/16 -j logaccept-56 --A address-102 -d 172.16.2.0/16 -j logaccept-56 --A address-103 -d 172.16.0.0/16 -j logpass-45 --A address-103 -d 172.16.2.0/16 -j logpass-45 --A address-104 -s 10.0.0.1 -j ACCEPT --A address-105 -s 10.0.0.1 --A address-106 -s 10.0.0.1 -j logaccept-57 --A address-107 -s 10.0.0.1 -m limit --limit 1/second -j LOG --A address-108 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-109 -s 10.0.0.1 -d 172.16.0.0/16 --A address-11 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-110 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-58 --A address-111 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-112 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-112 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-113 -s 10.0.0.1 -d 172.16.0.0/16 --A address-113 -s 10.0.0.1 -d 172.16.2.0/16 --A address-114 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-59 --A address-114 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-59 --A address-115 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-46 --A address-115 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-46 --A address-116 -s 10.0.0.1 -j ACCEPT --A address-116 -s 10.0.0.2 -j ACCEPT --A address-117 -s 10.0.0.1 --A address-117 -s 10.0.0.2 --A address-118 -s 10.0.0.1 -j logaccept-60 --A address-118 -s 10.0.0.2 -j logaccept-60 --A address-119 -s 10.0.0.1 -j logpass-47 --A address-119 -s 10.0.0.2 -j logpass-47 --A address-12 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-12 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-120 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-120 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-121 -s 10.0.0.1 -d 172.16.0.0/16 --A address-121 -s 10.0.0.2 -d 172.16.0.0/16 --A address-122 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-61 --A address-122 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-61 --A address-123 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-48 --A address-123 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-48 --A address-124 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-124 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-124 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-124 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-125 -s 10.0.0.1 -d 172.16.0.0/16 --A address-125 -s 10.0.0.1 -d 172.16.2.0/16 --A address-125 -s 10.0.0.2 -d 172.16.0.0/16 --A address-125 -s 10.0.0.2 -d 172.16.2.0/16 --A address-126 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-62 --A address-126 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-62 --A address-126 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-62 --A address-126 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-62 --A address-127 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-49 --A address-127 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-49 --A address-127 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-49 --A address-127 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-49 --A address-13 -s 10.0.0.1 -d 172.16.0.0/16 --A address-13 -s 10.0.0.1 -d 172.16.2.0/16 --A address-14 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-14 --A address-14 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-14 --A address-15 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-12 --A address-15 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-12 --A address-16 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-16 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-17 -s 10.0.0.1 -d 172.16.0.0/16 --A address-17 -s 10.0.0.2 -d 172.16.0.0/16 --A address-18 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-16 --A address-18 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-16 --A address-19 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-14 --A address-19 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-14 --A address-2 -d 172.16.0.0/16 -j logaccept-10 --A address-20 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-20 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-20 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-20 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-21 -s 10.0.0.1 -d 172.16.0.0/16 --A address-21 -s 10.0.0.1 -d 172.16.2.0/16 --A address-21 -s 10.0.0.2 -d 172.16.0.0/16 --A address-21 -s 10.0.0.2 -d 172.16.2.0/16 --A address-22 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-17 --A address-22 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-17 --A address-22 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-17 --A address-22 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-17 --A address-23 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-15 --A address-23 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-15 --A address-23 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-15 --A address-23 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-15 --A address-24 -d 172.16.0.0/16 -j ACCEPT --A address-25 -d 172.16.0.0/16 --A address-26 -d 172.16.0.0/16 -j logaccept-28 --A address-27 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-28 -d 172.16.0.0/16 -j ACCEPT --A address-28 -d 172.16.2.0/16 -j ACCEPT --A address-29 -d 172.16.0.0/16 --A address-29 -d 172.16.2.0/16 --A address-3 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-30 -d 172.16.0.0/16 -j logaccept-29 --A address-30 -d 172.16.2.0/16 -j logaccept-29 --A address-31 -d 172.16.0.0/16 -j logpass-25 --A address-31 -d 172.16.2.0/16 -j logpass-25 --A address-32 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-33 -s 10.0.0.1 -d 172.16.0.0/16 --A address-34 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-31 --A address-35 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-36 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-36 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-37 -s 10.0.0.1 -d 172.16.0.0/16 --A address-37 -s 10.0.0.1 -d 172.16.2.0/16 --A address-38 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-32 --A address-38 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-32 --A address-39 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-26 --A address-39 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-26 --A address-4 -d 172.16.0.0/16 -j ACCEPT --A address-4 -d 172.16.2.0/16 -j ACCEPT --A address-40 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-40 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-41 -s 10.0.0.1 -d 172.16.0.0/16 --A address-41 -s 10.0.0.2 -d 172.16.0.0/16 --A address-42 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-34 --A address-42 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-34 --A address-43 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-28 --A address-43 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-28 --A address-44 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-44 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-44 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-44 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-45 -s 10.0.0.1 -d 172.16.0.0/16 --A address-45 -s 10.0.0.1 -d 172.16.2.0/16 --A address-45 -s 10.0.0.2 -d 172.16.0.0/16 --A address-45 -s 10.0.0.2 -d 172.16.2.0/16 --A address-46 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-35 --A address-46 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-35 --A address-46 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-35 --A address-46 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-35 --A address-47 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-29 --A address-47 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-29 --A address-47 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-29 --A address-47 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-29 --A address-48 -s 10.0.0.1 -j ACCEPT --A address-49 -s 10.0.0.1 --A address-5 -d 172.16.0.0/16 --A address-5 -d 172.16.2.0/16 --A address-50 -s 10.0.0.1 -j logaccept-39 --A address-51 -s 10.0.0.1 -m limit --limit 1/second -j LOG --A address-52 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-53 -s 10.0.0.1 -d 172.16.0.0/16 --A address-54 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-40 --A address-55 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-56 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-56 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-57 -s 10.0.0.1 -d 172.16.0.0/16 --A address-57 -s 10.0.0.1 -d 172.16.2.0/16 --A address-58 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-41 --A address-58 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-41 --A address-59 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-33 --A address-59 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-33 --A address-6 -d 172.16.0.0/16 -j logaccept-11 --A address-6 -d 172.16.2.0/16 -j logaccept-11 --A address-60 -s 10.0.0.1 -j ACCEPT --A address-60 -s 10.0.0.2 -j ACCEPT --A address-61 -s 10.0.0.1 --A address-61 -s 10.0.0.2 --A address-62 -s 10.0.0.1 -j logaccept-42 --A address-62 -s 10.0.0.2 -j logaccept-42 --A address-63 -s 10.0.0.1 -j logpass-34 --A address-63 -s 10.0.0.2 -j logpass-34 --A address-64 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-64 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-65 -s 10.0.0.1 -d 172.16.0.0/16 --A address-65 -s 10.0.0.2 -d 172.16.0.0/16 --A address-66 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-43 --A address-66 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-43 --A address-67 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-35 --A address-67 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-35 --A address-68 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-68 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-68 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-68 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-69 -s 10.0.0.1 -d 172.16.0.0/16 --A address-69 -s 10.0.0.1 -d 172.16.2.0/16 --A address-69 -s 10.0.0.2 -d 172.16.0.0/16 --A address-69 -s 10.0.0.2 -d 172.16.2.0/16 --A address-7 -d 172.16.0.0/16 -j logpass-10 --A address-7 -d 172.16.2.0/16 -j logpass-10 --A address-70 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-44 --A address-70 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-44 --A address-70 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-44 --A address-70 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-44 --A address-71 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-36 --A address-71 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-36 --A address-71 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-36 --A address-71 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-36 --A address-72 -s 10.0.0.1 -j ACCEPT --A address-73 -s 10.0.0.1 --A address-74 -s 10.0.0.1 -j logaccept-48 --A address-75 -s 10.0.0.1 -m limit --limit 1/second -j LOG --A address-76 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-77 -s 10.0.0.1 -d 172.16.0.0/16 --A address-78 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-49 --A address-79 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-8 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-80 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-80 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-81 -s 10.0.0.1 -d 172.16.0.0/16 --A address-81 -s 10.0.0.1 -d 172.16.2.0/16 --A address-82 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-50 --A address-82 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-50 --A address-83 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-40 --A address-83 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-40 --A address-84 -s 10.0.0.1 -j ACCEPT --A address-84 -s 10.0.0.2 -j ACCEPT --A address-85 -s 10.0.0.1 --A address-85 -s 10.0.0.2 --A address-86 -s 10.0.0.1 -j logaccept-51 --A address-86 -s 10.0.0.2 -j logaccept-51 --A address-87 -s 10.0.0.1 -j logpass-41 --A address-87 -s 10.0.0.2 -j logpass-41 --A address-88 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-88 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-89 -s 10.0.0.1 -d 172.16.0.0/16 --A address-89 -s 10.0.0.2 -d 172.16.0.0/16 --A address-9 -s 10.0.0.1 -d 172.16.0.0/16 --A address-90 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-52 --A address-90 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-52 --A address-91 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-42 --A address-91 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-42 --A address-92 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-92 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-92 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-92 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-93 -s 10.0.0.1 -d 172.16.0.0/16 --A address-93 -s 10.0.0.1 -d 172.16.2.0/16 --A address-93 -s 10.0.0.2 -d 172.16.0.0/16 --A address-93 -s 10.0.0.2 -d 172.16.2.0/16 --A address-94 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-53 --A address-94 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-53 --A address-94 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-53 --A address-94 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-53 --A address-95 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-43 --A address-95 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-43 --A address-95 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-43 --A address-95 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-43 --A address-96 -d 172.16.0.0/16 -j ACCEPT --A address-97 -d 172.16.0.0/16 --A address-98 -d 172.16.0.0/16 -j logaccept-55 --A address-99 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG -A icmp-routing -p icmp --icmp-type 3 -j ACCEPT -A icmp-routing -p icmp --icmp-type 11 -j ACCEPT -A icmp-routing -p icmp --icmp-type 12 -j ACCEPT --A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1 +-A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-0 -A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-2 +-A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1 -A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --set --A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 +-A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 -A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-100 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-100 -j ACCEPT @@ -29155,132 +25459,132 @@ hash:net family inet -A limit-1072 -j DROP -A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1073 -j RETURN -A limit-1073 -j DROP --A limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-343 +-A limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-342 -A limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-344 +-A limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-343 -A limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --set --A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-345 +-A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-344 -A limit-1076 -m limit --limit 1/second -j LOG -A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-346 +-A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-345 -A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-347 +-A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-346 -A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-348 +-A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-347 -A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --set -A limit-108 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-108 -j ACCEPT --A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-349 +-A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-348 -A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-350 +-A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-349 -A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set --A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-351 +-A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-350 -A limit-1082 -m limit --limit 1/second -j LOG -A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-352 +-A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-351 -A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-353 +-A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-352 -A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-354 +-A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-353 -A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --set --A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-355 +-A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-354 -A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-356 +-A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-355 -A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-357 +-A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-356 -A limit-1088 -m limit --limit 1/second -j LOG -A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-358 +-A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-357 -A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-109 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-359 +-A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-358 -A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-360 +-A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-359 -A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-361 +-A limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-360 -A limit-1092 -j ACCEPT --A limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-363 +-A limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-362 -A limit-1094 -m limit --limit 1/second -j LOG -A limit-1094 -j ACCEPT --A limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-364 +-A limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-363 -A limit-1095 -m limit --limit 1/second -j LOG --A limit-1096 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-365 +-A limit-1096 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-364 -A limit-1096 -j ACCEPT --A limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-367 +-A limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-366 -A limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-368 +-A limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-367 -A limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 +-A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 -A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set -A limit-110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-110 -m limit --limit 1/second -j LOG -A limit-110 -j ACCEPT --A limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-369 +-A limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-368 -A limit-1100 -m limit --limit 1/second -j LOG -A limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-370 +-A limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-369 -A limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-371 +-A limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-370 -A limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-372 +-A limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-371 -A limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1104 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-373 +-A limit-1104 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-372 -A limit-1104 -j ACCEPT --A limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-375 +-A limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-374 -A limit-1106 -m limit --limit 1/second -j LOG -A limit-1106 -j ACCEPT --A limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-376 +-A limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-375 -A limit-1107 -m limit --limit 1/second -j LOG --A limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-377 +-A limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-376 -A limit-1108 -j ACCEPT -A limit-111 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-111 -m limit --limit 1/second -j LOG --A limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-379 +-A limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-378 -A limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-380 +-A limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-379 -A limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-381 +-A limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-380 -A limit-1112 -m limit --limit 1/second -j LOG -A limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-382 +-A limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-381 -A limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-383 +-A limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-382 -A limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-384 +-A limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-383 -A limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1116 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-385 +-A limit-1116 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-384 -A limit-1116 -j ACCEPT --A limit-1118 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-387 +-A limit-1118 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-386 -A limit-1118 -m limit --limit 1/second -j LOG -A limit-1118 -j ACCEPT --A limit-1119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-388 +-A limit-1119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-387 -A limit-1119 -m limit --limit 1/second -j LOG -A limit-112 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-112 -j ACCEPT --A limit-1120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-389 +-A limit-1120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-388 -A limit-1120 -j ACCEPT --A limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-391 +-A limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-390 -A limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-392 +-A limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-391 -A limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-393 +-A limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-392 -A limit-1124 -m limit --limit 1/second -j LOG -A limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-394 +-A limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-393 -A limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-395 +-A limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-394 -A limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-396 +-A limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-395 -A limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1128 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-397 +-A limit-1128 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-396 -A limit-1128 -j ACCEPT -A limit-113 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1130 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-399 +-A limit-1130 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-398 -A limit-1130 -m limit --limit 1/second -j LOG -A limit-1130 -j ACCEPT --A limit-1131 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-400 +-A limit-1131 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-399 -A limit-1131 -m limit --limit 1/second -j LOG --A limit-1132 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-401 +-A limit-1132 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-400 -A limit-1132 -j ACCEPT -A limit-1134 -m recent --name limit-1134 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1134 -m recent --name limit-1134 --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -29422,7 +25726,7 @@ hash:net family inet -A limit-1198 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1199 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1199 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 +-A limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 -A limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -29510,116 +25814,116 @@ hash:net family inet -A limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1240 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1240 -j ACCEPT --A limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-403 +-A limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-402 -A limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-404 +-A limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-403 -A limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --set --A limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-405 +-A limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-404 -A limit-1244 -m limit --limit 1/second -j LOG -A limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-406 +-A limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-405 -A limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-407 +-A limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-406 -A limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-408 +-A limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-407 -A limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --set --A limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-409 +-A limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-408 -A limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-410 +-A limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-409 -A limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-411 +-A limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-410 -A limit-1250 -m limit --limit 1/second -j LOG -A limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-412 +-A limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-411 -A limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-413 +-A limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-412 -A limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-414 +-A limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-413 -A limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1254 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-415 +-A limit-1254 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-414 -A limit-1254 -j ACCEPT --A limit-1256 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-417 +-A limit-1256 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-416 -A limit-1256 -m limit --limit 1/second -j LOG -A limit-1256 -j ACCEPT --A limit-1257 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-418 +-A limit-1257 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-417 -A limit-1257 -m limit --limit 1/second -j LOG --A limit-1258 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-419 +-A limit-1258 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-418 -A limit-1258 -j ACCEPT -A limit-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-126 -j ACCEPT --A limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-421 +-A limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-420 -A limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-422 +-A limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-421 -A limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-423 +-A limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-422 -A limit-1262 -m limit --limit 1/second -j LOG -A limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-424 +-A limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-423 -A limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-425 +-A limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-424 -A limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-426 +-A limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-425 -A limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1266 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-427 +-A limit-1266 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-426 -A limit-1266 -j ACCEPT --A limit-1268 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-429 +-A limit-1268 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-428 -A limit-1268 -m limit --limit 1/second -j LOG -A limit-1268 -j ACCEPT --A limit-1269 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-430 +-A limit-1269 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-429 -A limit-1269 -m limit --limit 1/second -j LOG -A limit-127 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1270 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-431 +-A limit-1270 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-430 -A limit-1270 -j ACCEPT --A limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-433 +-A limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-432 -A limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-434 +-A limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-433 -A limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-435 +-A limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-434 -A limit-1274 -m limit --limit 1/second -j LOG -A limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-436 +-A limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-435 -A limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-437 +-A limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-436 -A limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-438 +-A limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-437 -A limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1278 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-439 +-A limit-1278 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-438 -A limit-1278 -j ACCEPT -A limit-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-128 -m limit --limit 1/second -j LOG -A limit-128 -j ACCEPT --A limit-1280 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-441 +-A limit-1280 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-440 -A limit-1280 -m limit --limit 1/second -j LOG -A limit-1280 -j ACCEPT --A limit-1281 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-442 +-A limit-1281 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-441 -A limit-1281 -m limit --limit 1/second -j LOG --A limit-1282 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-443 +-A limit-1282 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-442 -A limit-1282 -j ACCEPT --A limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-445 +-A limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-444 -A limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-446 +-A limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-445 -A limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-447 +-A limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-446 -A limit-1286 -m limit --limit 1/second -j LOG -A limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-448 +-A limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-447 -A limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-449 +-A limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-448 -A limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-450 +-A limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-449 -A limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-129 -m limit --limit 1/second -j LOG --A limit-1290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-451 +-A limit-1290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-450 -A limit-1290 -j ACCEPT --A limit-1292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-453 +-A limit-1292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-452 -A limit-1292 -m limit --limit 1/second -j LOG -A limit-1292 -j ACCEPT --A limit-1293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-454 +-A limit-1293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-453 -A limit-1293 -m limit --limit 1/second -j LOG --A limit-1294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-455 +-A limit-1294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-454 -A limit-1294 -j ACCEPT -A limit-1296 -m recent --name limit-1296 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1296 -m recent --name limit-1296 --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -29630,7 +25934,7 @@ hash:net family inet -A limit-1298 -m recent --name limit-1298 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1299 -m recent --name limit-1299 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1299 -m recent --name limit-1299 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 +-A limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 -A limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-130 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-130 -j ACCEPT @@ -29837,7 +26141,7 @@ hash:net family inet -A limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1398 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1398 -j ACCEPT --A limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 +-A limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 -A limit-14 -m limit --limit 1/second -j LOG -A limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP @@ -29856,7 +26160,7 @@ hash:net family inet -A limit-1405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1405 -j RETURN -A limit-1405 -m limit --limit 1/second -j LOG -A limit-1405 -j DROP --A limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1406 -j logaccept-77 +-A limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1406 -j logaccept-14 -A limit-1406 -m limit --limit 1/second -j LOG -A limit-1406 -j DROP -A limit-1407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1407 -j ACCEPT @@ -29870,7 +26174,7 @@ hash:net family inet -A limit-1409 -j DROP -A limit-141 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-141 -m limit --limit 1/second -j LOG --A limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1410 -j logaccept-78 +-A limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1410 -j logaccept-15 -A limit-1410 -m limit --limit 1/second -j LOG -A limit-1410 -j DROP -A limit-1411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1411 -j ACCEPT @@ -29880,7 +26184,7 @@ hash:net family inet -A limit-1412 -j DROP -A limit-1413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1413 -j RETURN -A limit-1413 -j DROP --A limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1414 -j logaccept-79 +-A limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1414 -j logaccept-16 -A limit-1414 -j DROP -A limit-1415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1415 -j ACCEPT -A limit-1415 -j DROP @@ -29888,7 +26192,7 @@ hash:net family inet -A limit-1416 -j DROP -A limit-1417 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1417 -j RETURN -A limit-1417 -j DROP --A limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1418 -j logaccept-80 +-A limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1418 -j logaccept-17 -A limit-1418 -j DROP -A limit-1419 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1419 -j ACCEPT -A limit-1419 -j DROP @@ -29900,7 +26204,7 @@ hash:net family inet -A limit-1421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1421 -j RETURN -A limit-1421 -m limit --limit 1/second -j LOG -A limit-1421 -j DROP --A limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1422 -j logaccept-81 +-A limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1422 -j logaccept-18 -A limit-1422 -m limit --limit 1/second -j LOG -A limit-1422 -j DROP -A limit-1423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1423 -j ACCEPT @@ -29910,7 +26214,7 @@ hash:net family inet -A limit-1424 -j DROP -A limit-1425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1425 -j RETURN -A limit-1425 -j DROP --A limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1426 -j logaccept-82 +-A limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1426 -j logaccept-19 -A limit-1426 -j DROP -A limit-1427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1427 -j ACCEPT -A limit-1427 -j DROP @@ -29919,7 +26223,7 @@ hash:net family inet -A limit-1429 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1429 -j RETURN -A limit-1429 -j DROP -A limit-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1430 -j logaccept-83 +-A limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1430 -j logaccept-20 -A limit-1430 -j DROP -A limit-1431 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1431 -j ACCEPT -A limit-1431 -j DROP @@ -29936,7 +26240,7 @@ hash:net family inet -A limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 +-A limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 -A limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-150 -j ACCEPT @@ -29958,7 +26262,7 @@ hash:net family inet -A limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 +-A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 -A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT @@ -29975,130 +26279,130 @@ hash:net family inet -A limit-166 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-166 -j ACCEPT -A limit-167 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-61 +-A limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-60 -A limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-62 +-A limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-61 -A limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --set --A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-18 +-A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 -A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-63 +-A limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-62 -A limit-170 -m limit --limit 1/second -j LOG -A limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-64 +-A limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-63 -A limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-65 +-A limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-64 -A limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-66 +-A limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-65 -A limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --set --A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-67 +-A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-66 -A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-68 +-A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-67 -A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-69 +-A limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-68 -A limit-176 -m limit --limit 1/second -j LOG -A limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-70 +-A limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-69 -A limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-71 +-A limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-70 -A limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-72 +-A limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-71 -A limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-19 +-A limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-18 -A limit-18 -j ACCEPT --A limit-180 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-73 +-A limit-180 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-72 -A limit-180 -j ACCEPT --A limit-181 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 --A limit-182 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-75 +-A limit-181 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-73 +-A limit-182 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 -A limit-182 -m limit --limit 1/second -j LOG -A limit-182 -j ACCEPT --A limit-183 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-76 +-A limit-183 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-75 -A limit-183 -m limit --limit 1/second -j LOG --A limit-184 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-77 +-A limit-184 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-76 -A limit-184 -j ACCEPT --A limit-185 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-78 --A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-79 +-A limit-185 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-77 +-A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-78 -A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-80 +-A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-79 -A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-81 +-A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-80 -A limit-188 -m limit --limit 1/second -j LOG -A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-82 +-A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-81 -A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-19 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-20 --A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-83 +-A limit-19 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-19 +-A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-82 -A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-84 +-A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-83 -A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-192 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-85 +-A limit-192 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-84 -A limit-192 -j ACCEPT --A limit-193 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 --A limit-194 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-87 +-A limit-193 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-85 +-A limit-194 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 -A limit-194 -m limit --limit 1/second -j LOG -A limit-194 -j ACCEPT --A limit-195 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-88 +-A limit-195 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-87 -A limit-195 -m limit --limit 1/second -j LOG --A limit-196 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-89 +-A limit-196 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-88 -A limit-196 -j ACCEPT --A limit-197 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-90 --A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-91 +-A limit-197 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-89 +-A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-90 -A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-92 +-A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-91 -A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 +-A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-2 -A limit-2 -m limit --limit 1/second -j LOG -A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-21 +-A limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-20 -A limit-20 -m limit --limit 1/second -j LOG -A limit-20 -j ACCEPT --A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-93 +-A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-92 -A limit-200 -m limit --limit 1/second -j LOG -A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-94 +-A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-93 -A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-95 +-A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-94 -A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-96 +-A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-95 -A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-97 +-A limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-96 -A limit-204 -j ACCEPT --A limit-205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 --A limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-99 +-A limit-205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-97 +-A limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 -A limit-206 -m limit --limit 1/second -j LOG -A limit-206 -j ACCEPT --A limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-100 +-A limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-99 -A limit-207 -m limit --limit 1/second -j LOG --A limit-208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-101 +-A limit-208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-100 -A limit-208 -j ACCEPT --A limit-209 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-102 --A limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-22 +-A limit-209 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-101 +-A limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-21 -A limit-21 -m limit --limit 1/second -j LOG --A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-103 +-A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-102 -A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-104 +-A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-103 -A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-105 +-A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-104 -A limit-212 -m limit --limit 1/second -j LOG -A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-106 +-A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-105 -A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-107 +-A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-106 -A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-108 +-A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-107 -A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-109 +-A limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-108 -A limit-216 -j ACCEPT --A limit-217 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 --A limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-111 +-A limit-217 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-109 +-A limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 -A limit-218 -m limit --limit 1/second -j LOG -A limit-218 -j ACCEPT --A limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-112 +-A limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-111 -A limit-219 -m limit --limit 1/second -j LOG --A limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-23 +-A limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-22 -A limit-22 -j ACCEPT --A limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-113 +-A limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-112 -A limit-220 -j ACCEPT --A limit-221 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-114 +-A limit-221 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-113 -A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP @@ -30116,7 +26420,7 @@ hash:net family inet -A limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-24 +-A limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-23 -A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-230 -m limit --limit 1/second -j LOG -A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -30137,7 +26441,7 @@ hash:net family inet -A limit-238 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-238 -j ACCEPT -A limit-239 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 +-A limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-24 -A limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT @@ -30160,7 +26464,7 @@ hash:net family inet -A limit-248 -j ACCEPT -A limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-249 -m limit --limit 1/second -j LOG --A limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 +-A limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 -A limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-250 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-250 -j ACCEPT @@ -30181,7 +26485,7 @@ hash:net family inet -A limit-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-258 -j ACCEPT -A limit-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 +-A limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 -A limit-26 -m limit --limit 1/second -j LOG -A limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-260 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP @@ -30205,7 +26509,7 @@ hash:net family inet -A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 +-A limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 -A limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-270 -j ACCEPT @@ -30227,7 +26531,7 @@ hash:net family inet -A limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 +-A limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 -A limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -30249,7 +26553,7 @@ hash:net family inet -A limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-288 -j ACCEPT -A limit-289 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-30 +-A limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 -A limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-290 -m limit --limit 1/second -j LOG @@ -30272,9 +26576,9 @@ hash:net family inet -A limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 +-A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 -A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-30 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 +-A limit-30 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-30 -A limit-30 -j ACCEPT -A limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-300 -j ACCEPT @@ -30296,7 +26600,7 @@ hash:net family inet -A limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-31 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 +-A limit-31 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 -A limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP @@ -30316,7 +26620,7 @@ hash:net family inet -A limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 +-A limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 -A limit-32 -m limit --limit 1/second -j LOG -A limit-32 -j ACCEPT -A limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP @@ -30339,7 +26643,7 @@ hash:net family inet -A limit-328 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-328 -j ACCEPT -A limit-329 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 +-A limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 -A limit-33 -m limit --limit 1/second -j LOG -A limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-330 -j ACCEPT -A limit-330 -m limit --limit 1/second -j LOG @@ -30347,7 +26651,7 @@ hash:net family inet -A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-331 -j RETURN -A limit-331 -m limit --limit 1/second -j LOG -A limit-331 -j DROP --A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-63 +-A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-0 -A limit-332 -m limit --limit 1/second -j LOG -A limit-332 -j DROP -A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-333 -j ACCEPT @@ -30359,7 +26663,7 @@ hash:net family inet -A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-335 -j RETURN -A limit-335 -m limit --limit 1/second -j LOG -A limit-335 -j DROP --A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-64 +-A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-1 -A limit-336 -m limit --limit 1/second -j LOG -A limit-336 -j DROP -A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-337 -j ACCEPT @@ -30369,9 +26673,9 @@ hash:net family inet -A limit-338 -j DROP -A limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-339 -j RETURN -A limit-339 -j DROP --A limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 +-A limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 -A limit-34 -j ACCEPT --A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-65 +-A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-2 -A limit-340 -j DROP -A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-341 -j ACCEPT -A limit-341 -j DROP @@ -30379,7 +26683,7 @@ hash:net family inet -A limit-342 -j DROP -A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-343 -j RETURN -A limit-343 -j DROP --A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-66 +-A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-3 -A limit-344 -j DROP -A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-345 -j ACCEPT -A limit-345 -j DROP @@ -30389,18 +26693,18 @@ hash:net family inet -A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-347 -j RETURN -A limit-347 -m limit --limit 1/second -j LOG -A limit-347 -j DROP --A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-67 +-A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-4 -A limit-348 -m limit --limit 1/second -j LOG -A limit-348 -j DROP -A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-349 -j ACCEPT -A limit-349 -m limit --limit 1/second -j LOG -A limit-349 -j DROP --A limit-35 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-36 +-A limit-35 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 -A limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-350 -j ACCEPT -A limit-350 -j DROP -A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-351 -j RETURN -A limit-351 -j DROP --A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-68 +-A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-5 -A limit-352 -j DROP -A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-353 -j ACCEPT -A limit-353 -j DROP @@ -30408,144 +26712,144 @@ hash:net family inet -A limit-354 -j DROP -A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-355 -j RETURN -A limit-355 -j DROP --A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-69 +-A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-6 -A limit-356 -j DROP -A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-357 -j ACCEPT -A limit-357 -j DROP --A limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 +-A limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-114 -A limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 +-A limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 -A limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --set --A limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-37 +-A limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-36 -A limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 +-A limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 -A limit-360 -m limit --limit 1/second -j LOG -A limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 +-A limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 -A limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 +-A limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 -A limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-120 +-A limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 -A limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --set --A limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-121 +-A limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-120 -A limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-122 +-A limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-121 -A limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --set --A limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-123 +-A limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-122 -A limit-366 -m limit --limit 1/second -j LOG -A limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-124 +-A limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-123 -A limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-125 +-A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-124 -A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-126 +-A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-125 -A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --set --A limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-38 +-A limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-37 -A limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-127 +-A limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-126 -A limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-128 +-A limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-127 -A limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-129 +-A limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-128 -A limit-372 -m limit --limit 1/second -j LOG -A limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 +-A limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-129 -A limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 +-A limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 -A limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 -A limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 +-A limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-132 -A limit-376 -j ACCEPT --A limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 +-A limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 -A limit-378 -m limit --limit 1/second -j LOG -A limit-378 -j ACCEPT --A limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-136 +-A limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 -A limit-379 -m limit --limit 1/second -j LOG --A limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-39 +-A limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-38 -A limit-38 -m limit --limit 1/second -j LOG -A limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-137 +-A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-136 -A limit-380 -j ACCEPT --A limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 +-A limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-138 -A limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 +-A limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 -A limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 +-A limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 -A limit-384 -m limit --limit 1/second -j LOG -A limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 +-A limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 -A limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 +-A limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 -A limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-144 +-A limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 -A limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 +-A limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-144 -A limit-388 -j ACCEPT --A limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-40 +-A limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-39 -A limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 +-A limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 -A limit-390 -m limit --limit 1/second -j LOG -A limit-390 -j ACCEPT --A limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 +-A limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 -A limit-391 -m limit --limit 1/second -j LOG --A limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 +-A limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 -A limit-392 -j ACCEPT --A limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 +-A limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-150 -A limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 +-A limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 -A limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 +-A limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 -A limit-396 -m limit --limit 1/second -j LOG -A limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 +-A limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 -A limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 +-A limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 -A limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-156 +-A limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 -A limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 +-A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 -A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-41 +-A limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-40 -A limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-400 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-157 +-A limit-400 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-156 -A limit-400 -j ACCEPT --A limit-402 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-159 +-A limit-402 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-158 -A limit-402 -m limit --limit 1/second -j LOG -A limit-402 -j ACCEPT --A limit-403 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 +-A limit-403 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-159 -A limit-403 -m limit --limit 1/second -j LOG --A limit-404 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 +-A limit-404 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 -A limit-404 -j ACCEPT --A limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-163 +-A limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-162 -A limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-164 +-A limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-163 -A limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-165 +-A limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-164 -A limit-408 -m limit --limit 1/second -j LOG -A limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-166 +-A limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-165 -A limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-42 +-A limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-41 -A limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-167 +-A limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-166 -A limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-168 +-A limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-167 -A limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-412 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 +-A limit-412 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-168 -A limit-412 -j ACCEPT --A limit-414 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-171 +-A limit-414 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-170 -A limit-414 -m limit --limit 1/second -j LOG -A limit-414 -j ACCEPT --A limit-415 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-172 +-A limit-415 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-171 -A limit-415 -m limit --limit 1/second -j LOG --A limit-416 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-173 +-A limit-416 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-172 -A limit-416 -j ACCEPT -A limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --set --A limit-42 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 +-A limit-42 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-42 -A limit-42 -j ACCEPT -A limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-420 -m limit --limit 1/second -j LOG @@ -30569,7 +26873,7 @@ hash:net family inet -A limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-43 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 +-A limit-43 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 -A limit-430 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-430 -j ACCEPT -A limit-432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP @@ -30588,7 +26892,7 @@ hash:net family inet -A limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-44 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 +-A limit-44 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 -A limit-44 -m limit --limit 1/second -j LOG -A limit-44 -j ACCEPT -A limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP @@ -30608,7 +26912,7 @@ hash:net family inet -A limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-45 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 +-A limit-45 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 -A limit-45 -m limit --limit 1/second -j LOG -A limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-450 -m limit --limit 1/second -j LOG @@ -30628,7 +26932,7 @@ hash:net family inet -A limit-457 -m limit --limit 1/second -j LOG -A limit-458 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-458 -j ACCEPT --A limit-46 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 +-A limit-46 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 -A limit-46 -j ACCEPT -A limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT @@ -30650,7 +26954,7 @@ hash:net family inet -A limit-468 -j ACCEPT -A limit-469 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-469 -m limit --limit 1/second -j LOG --A limit-47 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-48 +-A limit-47 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 -A limit-470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-470 -j ACCEPT -A limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP @@ -30670,7 +26974,7 @@ hash:net family inet -A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 +-A limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-48 -A limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-480 -m limit --limit 1/second -j LOG @@ -30690,7 +26994,7 @@ hash:net family inet -A limit-487 -m limit --limit 1/second -j LOG -A limit-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-488 -j ACCEPT --A limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 -A limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT @@ -30712,9 +27016,9 @@ hash:net family inet -A limit-498 -j ACCEPT -A limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-499 -m limit --limit 1/second -j LOG --A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 +-A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 -A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set --A limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 +-A limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 -A limit-50 -m limit --limit 1/second -j LOG -A limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP @@ -30734,7 +27038,7 @@ hash:net family inet -A limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-508 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-508 -j ACCEPT --A limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 +-A limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 -A limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-510 -m limit --limit 1/second -j LOG @@ -30756,7 +27060,7 @@ hash:net family inet -A limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 +-A limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 -A limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-520 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-520 -j ACCEPT @@ -30767,118 +27071,118 @@ hash:net family inet -A limit-523 -m limit --limit 1/second -j LOG -A limit-524 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-524 -j ACCEPT --A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 +-A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-174 -A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 +-A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 -A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --set --A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 +-A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 -A limit-528 -m limit --limit 1/second -j LOG -A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 +-A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 -A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-54 +-A limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 -A limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 +-A limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 -A limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 +-A limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 -A limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --set --A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 +-A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 -A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 +-A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 -A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 +-A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 -A limit-534 -m limit --limit 1/second -j LOG -A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-184 +-A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 -A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-185 +-A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-184 -A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-186 +-A limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-185 -A limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 +-A limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-186 -A limit-538 -j ACCEPT --A limit-54 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-54 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-54 -A limit-54 -j ACCEPT --A limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 +-A limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 -A limit-540 -m limit --limit 1/second -j LOG -A limit-540 -j ACCEPT --A limit-541 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 +-A limit-541 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 -A limit-541 -m limit --limit 1/second -j LOG --A limit-542 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 +-A limit-542 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 -A limit-542 -j ACCEPT --A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-193 +-A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-192 -A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-194 +-A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-193 -A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-195 +-A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-194 -A limit-546 -m limit --limit 1/second -j LOG -A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-196 +-A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-195 -A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-197 +-A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-196 -A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-198 +-A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-197 -A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-55 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 --A limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-199 +-A limit-55 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-198 -A limit-550 -j ACCEPT --A limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 +-A limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 -A limit-552 -m limit --limit 1/second -j LOG -A limit-552 -j ACCEPT --A limit-553 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 +-A limit-553 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 -A limit-553 -m limit --limit 1/second -j LOG --A limit-554 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 +-A limit-554 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 -A limit-554 -j ACCEPT --A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-205 +-A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-204 -A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-206 +-A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-205 -A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-207 +-A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-206 -A limit-558 -m limit --limit 1/second -j LOG -A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 +-A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-207 -A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-56 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 +-A limit-56 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 -A limit-56 -m limit --limit 1/second -j LOG -A limit-56 -j ACCEPT --A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 +-A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 -A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-210 +-A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 -A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-211 +-A limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-210 -A limit-562 -j ACCEPT --A limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-213 +-A limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-212 -A limit-564 -m limit --limit 1/second -j LOG -A limit-564 -j ACCEPT --A limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-214 +-A limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-213 -A limit-565 -m limit --limit 1/second -j LOG --A limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-215 +-A limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-214 -A limit-566 -j ACCEPT --A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-217 +-A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-216 -A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-218 +-A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-217 -A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-57 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 +-A limit-57 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 -A limit-57 -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-219 +-A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-218 -A limit-570 -m limit --limit 1/second -j LOG -A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-220 +-A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-219 -A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-221 +-A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-220 -A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-222 +-A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-221 -A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 +-A limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-222 -A limit-574 -j ACCEPT --A limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-225 +-A limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-224 -A limit-576 -m limit --limit 1/second -j LOG -A limit-576 -j ACCEPT --A limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-226 +-A limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-225 -A limit-577 -m limit --limit 1/second -j LOG --A limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-227 +-A limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-226 -A limit-578 -j ACCEPT --A limit-58 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 +-A limit-58 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 -A limit-58 -j ACCEPT -A limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -30902,7 +27206,7 @@ hash:net family inet -A limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-59 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 +-A limit-59 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 -A limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP @@ -30920,7 +27224,7 @@ hash:net family inet -A limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 +-A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 -A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -31113,7 +27417,7 @@ hash:net family inet -A limit-689 -j DROP -A limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-690 -j logaccept-70 +-A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-690 -j logaccept-7 -A limit-690 -m limit --limit 1/second -j LOG -A limit-690 -j DROP -A limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-691 -j ACCEPT @@ -31125,7 +27429,7 @@ hash:net family inet -A limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-693 -j RETURN -A limit-693 -m limit --limit 1/second -j LOG -A limit-693 -j DROP --A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-694 -j logaccept-71 +-A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-694 -j logaccept-8 -A limit-694 -m limit --limit 1/second -j LOG -A limit-694 -j DROP -A limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-695 -j ACCEPT @@ -31135,11 +27439,11 @@ hash:net family inet -A limit-696 -j DROP -A limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-697 -j RETURN -A limit-697 -j DROP --A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-698 -j logaccept-72 +-A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-698 -j logaccept-9 -A limit-698 -j DROP -A limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-699 -j ACCEPT -A limit-699 -j DROP --A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 +-A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 -A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set -A limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -31147,7 +27451,7 @@ hash:net family inet -A limit-700 -j DROP -A limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-701 -j RETURN -A limit-701 -j DROP --A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-702 -j logaccept-73 +-A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-702 -j logaccept-10 -A limit-702 -j DROP -A limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-703 -j ACCEPT -A limit-703 -j DROP @@ -31157,7 +27461,7 @@ hash:net family inet -A limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-705 -j RETURN -A limit-705 -m limit --limit 1/second -j LOG -A limit-705 -j DROP --A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-706 -j logaccept-74 +-A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-706 -j logaccept-11 -A limit-706 -m limit --limit 1/second -j LOG -A limit-706 -j DROP -A limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-707 -j ACCEPT @@ -31169,7 +27473,7 @@ hash:net family inet -A limit-709 -j DROP -A limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-710 -j logaccept-75 +-A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-710 -j logaccept-12 -A limit-710 -j DROP -A limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-711 -j ACCEPT -A limit-711 -j DROP @@ -31177,121 +27481,121 @@ hash:net family inet -A limit-712 -j DROP -A limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-713 -j RETURN -A limit-713 -j DROP --A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-714 -j logaccept-76 +-A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-714 -j logaccept-13 -A limit-714 -j DROP -A limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-715 -j ACCEPT -A limit-715 -j DROP --A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 +-A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-228 -A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --set --A limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-230 +-A limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 -A limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --set --A limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-231 +-A limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-230 -A limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --set --A limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-232 +-A limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-231 -A limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-72 -j ACCEPT --A limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-233 +-A limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-232 -A limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --set --A limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-234 +-A limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-233 -A limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --set --A limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-235 +-A limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-234 -A limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --set --A limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-236 +-A limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-235 -A limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --set --A limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-237 +-A limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-236 -A limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --set --A limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-238 +-A limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-237 -A limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-239 +-A limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-238 -A limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --set --A limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-240 +-A limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-239 -A limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --set --A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-241 +-A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-240 -A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-242 +-A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-241 -A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-73 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-243 +-A limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-242 -A limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-244 +-A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-243 -A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-245 +-A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-244 -A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-245 -A limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-247 --A limit-735 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 --A limit-736 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-249 --A limit-737 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-735 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-247 +-A limit-736 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 +-A limit-737 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-249 -A limit-737 -m limit --limit 1/second -j LOG --A limit-738 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 --A limit-739 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-252 +-A limit-738 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-739 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 -A limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-74 -m limit --limit 1/second -j LOG -A limit-74 -j ACCEPT --A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-253 +-A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-252 -A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-254 +-A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-253 -A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-255 +-A limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-254 -A limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-256 +-A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-255 -A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-257 +-A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-256 -A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-258 +-A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-257 -A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 --A limit-747 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 --A limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-261 --A limit-749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-262 +-A limit-746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-258 +-A limit-747 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 +-A limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 +-A limit-749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-261 -A limit-749 -m limit --limit 1/second -j LOG -A limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-75 -m limit --limit 1/second -j LOG --A limit-750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-263 --A limit-751 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-264 --A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 +-A limit-750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-262 +-A limit-751 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-263 +-A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-264 -A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 +-A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 -A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 +-A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 -A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 +-A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 -A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 +-A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 -A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 -A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-758 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 --A limit-759 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A limit-758 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-759 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 -A limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-76 -j ACCEPT --A limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 --A limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 -A limit-761 -m limit --limit 1/second -j LOG --A limit-762 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 --A limit-763 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-276 --A limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-277 +-A limit-762 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-763 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 +-A limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-276 -A limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-278 +-A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-277 -A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-279 +-A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-278 -A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-280 +-A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-279 -A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-281 +-A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-280 -A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-282 +-A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-281 -A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-77 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-283 --A limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284 --A limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-285 --A limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-286 +-A limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-282 +-A limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-283 +-A limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284 +-A limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-285 -A limit-773 -m limit --limit 1/second -j LOG --A limit-774 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-287 --A limit-775 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-288 +-A limit-774 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-286 +-A limit-775 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-287 -A limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --set -A limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP @@ -31339,7 +27643,7 @@ hash:net family inet -A limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 +-A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 -A limit-8 -m limit --limit 1/second -j LOG -A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP @@ -31494,106 +27798,106 @@ hash:net family inet -A limit-881 -m limit --limit 1/second -j LOG -A limit-882 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-883 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 +-A limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-288 -A limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --set --A limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 +-A limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 -A limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --set --A limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 +-A limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 -A limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --set --A limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 +-A limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 -A limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 +-A limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 -A limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --set --A limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 +-A limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 -A limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --set -A limit-89 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 +-A limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 -A limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 +-A limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 -A limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 +-A limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 -A limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 +-A limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 -A limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 +-A limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 -A limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 -A limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-896 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 --A limit-897 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 --A limit-898 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 --A limit-899 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-896 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-897 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 +-A limit-898 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 +-A limit-899 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 -A limit-899 -m limit --limit 1/second -j LOG --A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 +-A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 -A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-900 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 --A limit-901 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-306 --A limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-307 +-A limit-900 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-901 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 +-A limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-306 -A limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-308 +-A limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-307 -A limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-309 +-A limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-308 -A limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 +-A limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-309 -A limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 +-A limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 -A limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 -A limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-908 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-313 --A limit-909 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-314 +-A limit-908 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-909 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-313 -A limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-910 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-315 --A limit-911 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-910 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-314 +-A limit-911 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-315 -A limit-911 -m limit --limit 1/second -j LOG --A limit-912 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-317 --A limit-913 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-318 --A limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-319 +-A limit-912 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-913 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-317 +-A limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-318 -A limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-320 +-A limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-319 -A limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-321 +-A limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-320 -A limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-322 +-A limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-321 -A limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-323 +-A limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-322 -A limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-323 -A limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-92 -m limit --limit 1/second -j LOG -A limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-920 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 --A limit-921 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 --A limit-922 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 --A limit-923 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-920 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-921 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 +-A limit-922 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 +-A limit-923 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 -A limit-923 -m limit --limit 1/second -j LOG --A limit-924 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 --A limit-925 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-330 --A limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 +-A limit-924 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-925 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 +-A limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-330 -A limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 +-A limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 -A limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 +-A limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 -A limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 +-A limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 -A limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 +-A limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 -A limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 -A limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-932 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-337 --A limit-933 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-338 --A limit-934 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-339 --A limit-935 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-932 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-933 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-337 +-A limit-934 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-338 +-A limit-935 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-339 -A limit-935 -m limit --limit 1/second -j LOG --A limit-936 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 --A limit-937 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-342 +-A limit-936 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-937 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 -A limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --set -A limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP @@ -31740,144 +28044,18 @@ hash:net family inet -A logaccept-20 -j ACCEPT -A logaccept-21 -m limit --limit 1/second -j LOG -A logaccept-21 -j ACCEPT --A logaccept-22 -m limit --limit 1/second -j LOG --A logaccept-22 -j ACCEPT --A logaccept-23 -m limit --limit 1/second -j LOG --A logaccept-23 -j ACCEPT --A logaccept-24 -m limit --limit 1/second -j LOG --A logaccept-24 -j ACCEPT --A logaccept-25 -m limit --limit 1/second -j LOG --A logaccept-25 -j ACCEPT --A logaccept-26 -m limit --limit 1/second -j LOG --A logaccept-26 -j ACCEPT --A logaccept-27 -m limit --limit 1/second -j LOG --A logaccept-27 -j ACCEPT --A logaccept-28 -m limit --limit 1/second -j LOG --A logaccept-28 -j ACCEPT --A logaccept-29 -m limit --limit 1/second -j LOG --A logaccept-29 -j ACCEPT -A logaccept-3 -m limit --limit 1/second -j LOG -A logaccept-3 -j ACCEPT --A logaccept-30 -m limit --limit 1/second -j LOG --A logaccept-30 -j ACCEPT --A logaccept-31 -m limit --limit 1/second -j LOG --A logaccept-31 -j ACCEPT --A logaccept-32 -m limit --limit 1/second -j LOG --A logaccept-32 -j ACCEPT --A logaccept-33 -m limit --limit 1/second -j LOG --A logaccept-33 -j ACCEPT --A logaccept-34 -m limit --limit 1/second -j LOG --A logaccept-34 -j ACCEPT --A logaccept-35 -m limit --limit 1/second -j LOG --A logaccept-35 -j ACCEPT --A logaccept-36 -m limit --limit 1/second -j LOG --A logaccept-36 -j ACCEPT --A logaccept-37 -m limit --limit 1/second -j LOG --A logaccept-37 -j ACCEPT --A logaccept-38 -m limit --limit 1/second -j LOG --A logaccept-38 -j ACCEPT --A logaccept-39 -m limit --limit 1/second -j LOG --A logaccept-39 -j ACCEPT -A logaccept-4 -m limit --limit 1/second -j LOG -A logaccept-4 -j ACCEPT --A logaccept-40 -m limit --limit 1/second -j LOG --A logaccept-40 -j ACCEPT --A logaccept-41 -m limit --limit 1/second -j LOG --A logaccept-41 -j ACCEPT --A logaccept-42 -m limit --limit 1/second -j LOG --A logaccept-42 -j ACCEPT --A logaccept-43 -m limit --limit 1/second -j LOG --A logaccept-43 -j ACCEPT --A logaccept-44 -m limit --limit 1/second -j LOG --A logaccept-44 -j ACCEPT --A logaccept-45 -m limit --limit 1/second -j LOG --A logaccept-45 -j ACCEPT --A logaccept-46 -m limit --limit 1/second -j LOG --A logaccept-46 -j ACCEPT --A logaccept-47 -m limit --limit 1/second -j LOG --A logaccept-47 -j ACCEPT --A logaccept-48 -m limit --limit 1/second -j LOG --A logaccept-48 -j ACCEPT --A logaccept-49 -m limit --limit 1/second -j LOG --A logaccept-49 -j ACCEPT -A logaccept-5 -m limit --limit 1/second -j LOG -A logaccept-5 -j ACCEPT --A logaccept-50 -m limit --limit 1/second -j LOG --A logaccept-50 -j ACCEPT --A logaccept-51 -m limit --limit 1/second -j LOG --A logaccept-51 -j ACCEPT --A logaccept-52 -m limit --limit 1/second -j LOG --A logaccept-52 -j ACCEPT --A logaccept-53 -m limit --limit 1/second -j LOG --A logaccept-53 -j ACCEPT --A logaccept-54 -m limit --limit 1/second -j LOG --A logaccept-54 -j ACCEPT --A logaccept-55 -m limit --limit 1/second -j LOG --A logaccept-55 -j ACCEPT --A logaccept-56 -m limit --limit 1/second -j LOG --A logaccept-56 -j ACCEPT --A logaccept-57 -m limit --limit 1/second -j LOG --A logaccept-57 -j ACCEPT --A logaccept-58 -m limit --limit 1/second -j LOG --A logaccept-58 -j ACCEPT --A logaccept-59 -m limit --limit 1/second -j LOG --A logaccept-59 -j ACCEPT -A logaccept-6 -m limit --limit 1/second -j LOG -A logaccept-6 -j ACCEPT --A logaccept-60 -m limit --limit 1/second -j LOG --A logaccept-60 -j ACCEPT --A logaccept-61 -m limit --limit 1/second -j LOG --A logaccept-61 -j ACCEPT --A logaccept-62 -m limit --limit 1/second -j LOG --A logaccept-62 -j ACCEPT --A logaccept-63 -m limit --limit 1/second -j LOG --A logaccept-63 -j ACCEPT --A logaccept-64 -m limit --limit 1/second -j LOG --A logaccept-64 -j ACCEPT --A logaccept-65 -m limit --limit 1/second -j LOG --A logaccept-65 -j ACCEPT --A logaccept-66 -m limit --limit 1/second -j LOG --A logaccept-66 -j ACCEPT --A logaccept-67 -m limit --limit 1/second -j LOG --A logaccept-67 -j ACCEPT --A logaccept-68 -m limit --limit 1/second -j LOG --A logaccept-68 -j ACCEPT --A logaccept-69 -m limit --limit 1/second -j LOG --A logaccept-69 -j ACCEPT -A logaccept-7 -m limit --limit 1/second -j LOG -A logaccept-7 -j ACCEPT --A logaccept-70 -m limit --limit 1/second -j LOG --A logaccept-70 -j ACCEPT --A logaccept-71 -m limit --limit 1/second -j LOG --A logaccept-71 -j ACCEPT --A logaccept-72 -m limit --limit 1/second -j LOG --A logaccept-72 -j ACCEPT --A logaccept-73 -m limit --limit 1/second -j LOG --A logaccept-73 -j ACCEPT --A logaccept-74 -m limit --limit 1/second -j LOG --A logaccept-74 -j ACCEPT --A logaccept-75 -m limit --limit 1/second -j LOG --A logaccept-75 -j ACCEPT --A logaccept-76 -m limit --limit 1/second -j LOG --A logaccept-76 -j ACCEPT --A logaccept-77 -m limit --limit 1/second -j LOG --A logaccept-77 -j ACCEPT --A logaccept-78 -m limit --limit 1/second -j LOG --A logaccept-78 -j ACCEPT --A logaccept-79 -m limit --limit 1/second -j LOG --A logaccept-79 -j ACCEPT -A logaccept-8 -m limit --limit 1/second -j LOG -A logaccept-8 -j ACCEPT --A logaccept-80 -m limit --limit 1/second -j LOG --A logaccept-80 -j ACCEPT --A logaccept-81 -m limit --limit 1/second -j LOG --A logaccept-81 -j ACCEPT --A logaccept-82 -m limit --limit 1/second -j LOG --A logaccept-82 -j ACCEPT --A logaccept-83 -m limit --limit 1/second -j LOG --A logaccept-83 -j ACCEPT --A logaccept-84 -m limit --limit 1/second -j LOG --A logaccept-84 -j ACCEPT -A logaccept-9 -m limit --limit 1/second -j LOG -A logaccept-9 -j ACCEPT -A logaccept-final-0 -m limit --limit 1/second -j LOG @@ -32802,8 +28980,6 @@ hash:net family inet -A logdrop-456 -j DROP -A logdrop-457 -m limit --limit 1/second -j LOG -A logdrop-457 -j DROP --A logdrop-458 -m limit --limit 1/second -j LOG --A logdrop-458 -j DROP -A logdrop-46 -m limit --limit 1/second -j LOG -A logdrop-46 -j DROP -A logdrop-47 -m limit --limit 1/second -j LOG @@ -32923,62 +29099,6 @@ hash:net family inet -A logdrop-99 -m limit --limit 1/second -j LOG -A logdrop-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG --A logpass-1 -m limit --limit 1/second -j LOG --A logpass-10 -m limit --limit 1/second -j LOG --A logpass-11 -m limit --limit 1/second -j LOG --A logpass-12 -m limit --limit 1/second -j LOG --A logpass-13 -m limit --limit 1/second -j LOG --A logpass-14 -m limit --limit 1/second -j LOG --A logpass-15 -m limit --limit 1/second -j LOG --A logpass-16 -m limit --limit 1/second -j LOG --A logpass-17 -m limit --limit 1/second -j LOG --A logpass-18 -m limit --limit 1/second -j LOG --A logpass-19 -m limit --limit 1/second -j LOG --A logpass-2 -m limit --limit 1/second -j LOG --A logpass-20 -m limit --limit 1/second -j LOG --A logpass-21 -m limit --limit 1/second -j LOG --A logpass-22 -m limit --limit 1/second -j LOG --A logpass-23 -m limit --limit 1/second -j LOG --A logpass-24 -m limit --limit 1/second -j LOG --A logpass-25 -m limit --limit 1/second -j LOG --A logpass-26 -m limit --limit 1/second -j LOG --A logpass-27 -m limit --limit 1/second -j LOG --A logpass-28 -m limit --limit 1/second -j LOG --A logpass-29 -m limit --limit 1/second -j LOG --A logpass-3 -m limit --limit 1/second -j LOG --A logpass-30 -m limit --limit 1/second -j LOG --A logpass-31 -m limit --limit 1/second -j LOG --A logpass-32 -m limit --limit 1/second -j LOG --A logpass-33 -m limit --limit 1/second -j LOG --A logpass-34 -m limit --limit 1/second -j LOG --A logpass-35 -m limit --limit 1/second -j LOG --A logpass-36 -m limit --limit 1/second -j LOG --A logpass-37 -m limit --limit 1/second -j LOG --A logpass-38 -m limit --limit 1/second -j LOG --A logpass-39 -m limit --limit 1/second -j LOG --A logpass-4 -m limit --limit 1/second -j LOG --A logpass-40 -m limit --limit 1/second -j LOG --A logpass-41 -m limit --limit 1/second -j LOG --A logpass-42 -m limit --limit 1/second -j LOG --A logpass-43 -m limit --limit 1/second -j LOG --A logpass-44 -m limit --limit 1/second -j LOG --A logpass-45 -m limit --limit 1/second -j LOG --A logpass-46 -m limit --limit 1/second -j LOG --A logpass-47 -m limit --limit 1/second -j LOG --A logpass-48 -m limit --limit 1/second -j LOG --A logpass-49 -m limit --limit 1/second -j LOG --A logpass-5 -m limit --limit 1/second -j LOG --A logpass-50 -m limit --limit 1/second -j LOG --A logpass-6 -m limit --limit 1/second -j LOG --A logpass-7 -m limit --limit 1/second -j LOG --A logpass-8 -m limit --limit 1/second -j LOG --A logpass-9 -m limit --limit 1/second -j LOG --A logreject-0 -m limit --limit 1/second -j LOG --A logreject-0 -j REJECT --A logtarpit-0 -m limit --limit 1/second -j LOG --A logtarpit-0 -j tarpit --A tarpit -p tcp -j TARPIT --A tarpit -j DROP COMMIT *mangle :FORWARD ACCEPT [0:0] @@ -33010,7 +29130,6 @@ COMMIT *raw :OUTPUT ACCEPT [0:0] :PREROUTING ACCEPT [0:0] --A OUTPUT -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack @@ -33197,17 +29316,7 @@ COMMIT -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -p tcp --dport 80 -j CT --notrack --A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack --A OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack --A OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack --A OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack --A OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack --A OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack --A OUTPUT -p esp -j CT --notrack --A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack -A OUTPUT -j CT --notrack --A PREROUTING -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -33566,15 +29675,6 @@ COMMIT -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack --A PREROUTING -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack --A PREROUTING -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack --A PREROUTING -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack --A PREROUTING -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack --A PREROUTING -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack --A PREROUTING -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack -A PREROUTING -i eth0 -j CT --notrack -A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack @@ -34923,32 +31023,26 @@ COMMIT :limit-998 - [0:0] :limit-999 - [0:0] :logaccept-0 - [0:0] +:logaccept-1 - [0:0] +:logaccept-10 - [0:0] +:logaccept-11 - [0:0] +:logaccept-12 - [0:0] +:logaccept-13 - [0:0] +:logaccept-14 - [0:0] +:logaccept-15 - [0:0] +:logaccept-16 - [0:0] +:logaccept-17 - [0:0] :logaccept-18 - [0:0] -:logaccept-27 - [0:0] -:logaccept-36 - [0:0] -:logaccept-45 - [0:0] -:logaccept-63 - [0:0] -:logaccept-64 - [0:0] -:logaccept-65 - [0:0] -:logaccept-66 - [0:0] -:logaccept-67 - [0:0] -:logaccept-68 - [0:0] -:logaccept-69 - [0:0] -:logaccept-70 - [0:0] -:logaccept-71 - [0:0] -:logaccept-72 - [0:0] -:logaccept-73 - [0:0] -:logaccept-74 - [0:0] -:logaccept-75 - [0:0] -:logaccept-76 - [0:0] -:logaccept-77 - [0:0] -:logaccept-78 - [0:0] -:logaccept-79 - [0:0] -:logaccept-80 - [0:0] -:logaccept-81 - [0:0] -:logaccept-82 - [0:0] -:logaccept-83 - [0:0] -:logaccept-84 - [0:0] +:logaccept-19 - [0:0] +:logaccept-2 - [0:0] +:logaccept-20 - [0:0] +:logaccept-21 - [0:0] +:logaccept-3 - [0:0] +:logaccept-4 - [0:0] +:logaccept-5 - [0:0] +:logaccept-6 - [0:0] +:logaccept-7 - [0:0] +:logaccept-8 - [0:0] :logaccept-9 - [0:0] :logaccept-final-0 - [0:0] :logaccept-final-1 - [0:0] @@ -35411,7 +31505,6 @@ COMMIT :logdrop-455 - [0:0] :logdrop-456 - [0:0] :logdrop-457 - [0:0] -:logdrop-458 - [0:0] :logdrop-46 - [0:0] :logdrop-47 - [0:0] :logdrop-48 - [0:0] @@ -35472,14 +31565,6 @@ COMMIT :logdrop-98 - [0:0] :logdrop-99 - [0:0] :logpass-0 - [0:0] -:logpass-16 - [0:0] -:logpass-30 - [0:0] -:logpass-37 - [0:0] -:logpass-50 - [0:0] -:logpass-9 - [0:0] -:logreject-0 - [0:0] -:logtarpit-0 - [0:0] -:tarpit - [0:0] -A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -j limit-1073 @@ -35841,36 +31926,6 @@ COMMIT -A FORWARD -j limit-717 -A FORWARD -j limit-716 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD --A FORWARD -j logaccept-0 --A FORWARD -j logpass-0 --A FORWARD -o eth1 -d fc00::/7 -j ACCEPT --A FORWARD -o eth1 -d fc00::/7 --A FORWARD -o eth1 -d fc00::/7 -j logaccept-9 --A FORWARD -o eth1 -d fc00::/7 -j logpass-9 --A FORWARD -i eth0 -j ACCEPT --A FORWARD -i eth0 --A FORWARD -i eth0 -j logaccept-18 --A FORWARD -i eth0 -j logpass-16 --A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d fc00::/7 --A FORWARD -i eth0 -o eth1 -d fc00::/7 -j logaccept-27 --A FORWARD -i eth0 -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG --A FORWARD -i eth1 -s fc00::/7 -j ACCEPT --A FORWARD -i eth1 -s fc00::/7 --A FORWARD -i eth1 -s fc00::/7 -j logaccept-36 --A FORWARD -i eth1 -s fc00::/7 -j logpass-30 --A FORWARD -i eth1 -s fc00::/7 -j ACCEPT --A FORWARD -i eth1 -s fc00::/7 --A FORWARD -i eth1 -s fc00::/7 -j logaccept-45 --A FORWARD -i eth1 -s fc00::/7 -j logpass-37 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logdrop-0 --A FORWARD --A FORWARD -j logreject-0 --A FORWARD -j logtarpit-0 -A FORWARD -o eth1 -d fc00::/7 -j limit-0 -A FORWARD -o eth1 -d fc00::/7 -j limit-1 -A FORWARD -o eth1 -d fc00::/7 -j limit-2 @@ -36422,14 +32477,14 @@ COMMIT -A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -j ACCEPT --A FORWARD -j logdrop-457 +-A FORWARD -j logdrop-456 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-84 --A FORWARD -j logdrop-458 --A FORWARD -j logpass-50 +-A FORWARD -j logaccept-21 +-A FORWARD -j logdrop-457 +-A FORWARD -j logpass-0 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD @@ -36822,28 +32877,6 @@ COMMIT -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT --A INPUT --A INPUT -j logaccept-0 --A INPUT -j logpass-0 --A INPUT -i eth0 -j ACCEPT --A INPUT -i eth0 --A INPUT -i eth0 -j logaccept-18 --A INPUT -i eth0 -j logpass-16 --A INPUT -i eth1 -s fc00::/7 -j ACCEPT --A INPUT -i eth1 -s fc00::/7 --A INPUT -i eth1 -s fc00::/7 -j logaccept-36 --A INPUT -i eth1 -s fc00::/7 -j logpass-30 --A INPUT -i eth1 -s fc00::/7 -j ACCEPT --A INPUT -i eth1 -s fc00::/7 --A INPUT -i eth1 -s fc00::/7 -j logaccept-45 --A INPUT -i eth1 -s fc00::/7 -j logpass-37 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logdrop-0 --A INPUT --A INPUT -j logreject-0 --A INPUT -j logtarpit-0 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-0 -A INPUT -j ACCEPT -A INPUT -j ACCEPT @@ -37048,11 +33081,11 @@ COMMIT -A INPUT -i eth0 -j limit-1090 -A INPUT -i eth0 -j limit-1091 -A INPUT -i eth0 -j limit-1092 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-362 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-361 -A INPUT -i eth0 -j limit-1094 -A INPUT -i eth0 -j limit-1095 -A INPUT -i eth0 -j limit-1096 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-366 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-365 -A INPUT -i eth0 -j limit-1098 -A INPUT -i eth0 -j limit-1099 -A INPUT -i eth0 -j limit-1100 @@ -37060,11 +33093,11 @@ COMMIT -A INPUT -i eth0 -j limit-1102 -A INPUT -i eth0 -j limit-1103 -A INPUT -i eth0 -j limit-1104 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-374 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-373 -A INPUT -i eth0 -j limit-1106 -A INPUT -i eth0 -j limit-1107 -A INPUT -i eth0 -j limit-1108 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-378 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-377 -A INPUT -i eth0 -j limit-1110 -A INPUT -i eth0 -j limit-1111 -A INPUT -i eth0 -j limit-1112 @@ -37072,11 +33105,11 @@ COMMIT -A INPUT -i eth0 -j limit-1114 -A INPUT -i eth0 -j limit-1115 -A INPUT -i eth0 -j limit-1116 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-386 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-385 -A INPUT -i eth0 -j limit-1118 -A INPUT -i eth0 -j limit-1119 -A INPUT -i eth0 -j limit-1120 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-390 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-389 -A INPUT -i eth0 -j limit-1122 -A INPUT -i eth0 -j limit-1123 -A INPUT -i eth0 -j limit-1124 @@ -37084,11 +33117,11 @@ COMMIT -A INPUT -i eth0 -j limit-1126 -A INPUT -i eth0 -j limit-1127 -A INPUT -i eth0 -j limit-1128 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-398 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-397 -A INPUT -i eth0 -j limit-1130 -A INPUT -i eth0 -j limit-1131 -A INPUT -i eth0 -j limit-1132 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-402 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-401 -A INPUT -i eth0 -j limit-1134 -A INPUT -i eth0 -j limit-1135 -A INPUT -i eth0 -j limit-1136 @@ -37210,11 +33243,11 @@ COMMIT -A INPUT -i eth0 -j limit-1252 -A INPUT -i eth0 -j limit-1253 -A INPUT -i eth0 -j limit-1254 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-416 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-415 -A INPUT -i eth0 -j limit-1256 -A INPUT -i eth0 -j limit-1257 -A INPUT -i eth0 -j limit-1258 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-420 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-419 -A INPUT -i eth0 -j limit-1260 -A INPUT -i eth0 -j limit-1261 -A INPUT -i eth0 -j limit-1262 @@ -37222,11 +33255,11 @@ COMMIT -A INPUT -i eth0 -j limit-1264 -A INPUT -i eth0 -j limit-1265 -A INPUT -i eth0 -j limit-1266 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-428 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-427 -A INPUT -i eth0 -j limit-1268 -A INPUT -i eth0 -j limit-1269 -A INPUT -i eth0 -j limit-1270 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-432 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-431 -A INPUT -i eth0 -j limit-1272 -A INPUT -i eth0 -j limit-1273 -A INPUT -i eth0 -j limit-1274 @@ -37234,11 +33267,11 @@ COMMIT -A INPUT -i eth0 -j limit-1276 -A INPUT -i eth0 -j limit-1277 -A INPUT -i eth0 -j limit-1278 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-440 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-439 -A INPUT -i eth0 -j limit-1280 -A INPUT -i eth0 -j limit-1281 -A INPUT -i eth0 -j limit-1282 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-444 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-443 -A INPUT -i eth0 -j limit-1284 -A INPUT -i eth0 -j limit-1285 -A INPUT -i eth0 -j limit-1286 @@ -37246,11 +33279,11 @@ COMMIT -A INPUT -i eth0 -j limit-1288 -A INPUT -i eth0 -j limit-1289 -A INPUT -i eth0 -j limit-1290 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-452 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-451 -A INPUT -i eth0 -j limit-1292 -A INPUT -i eth0 -j limit-1293 -A INPUT -i eth0 -j limit-1294 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-456 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-455 -A INPUT -i eth0 -j limit-1296 -A INPUT -i eth0 -j limit-1297 -A INPUT -i eth0 -j limit-1298 @@ -37394,20 +33427,17 @@ COMMIT -A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -j ACCEPT --A INPUT -j logdrop-457 +-A INPUT -j logdrop-456 -A INPUT -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-84 --A INPUT -j logdrop-458 --A INPUT -j logpass-50 +-A INPUT -j logaccept-21 +-A INPUT -j logdrop-457 +-A INPUT -j logpass-0 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -p tcp --sport 80 -j ACCEPT --A INPUT -p esp -j ACCEPT --A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmpv6 -j ACCEPT @@ -37773,20 +33803,6 @@ COMMIT -A OUTPUT -j limit-716 -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT --A OUTPUT -j logaccept-0 --A OUTPUT -j logpass-0 --A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT --A OUTPUT -o eth1 -d fc00::/7 --A OUTPUT -o eth1 -d fc00::/7 -j logaccept-9 --A OUTPUT -o eth1 -d fc00::/7 -j logpass-9 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-0 --A OUTPUT --A OUTPUT -j logreject-0 --A OUTPUT -j logtarpit-0 -A OUTPUT -o eth1 -d fc00::/7 -j limit-0 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1 -A OUTPUT -o eth1 -d fc00::/7 -j limit-2 @@ -38164,11 +34180,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-374 -A OUTPUT -o eth1 -d fc00::/7 -j limit-375 -A OUTPUT -o eth1 -d fc00::/7 -j limit-376 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-134 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-133 -A OUTPUT -o eth1 -d fc00::/7 -j limit-378 -A OUTPUT -o eth1 -d fc00::/7 -j limit-379 -A OUTPUT -o eth1 -d fc00::/7 -j limit-380 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-138 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-137 -A OUTPUT -o eth1 -d fc00::/7 -j limit-382 -A OUTPUT -o eth1 -d fc00::/7 -j limit-383 -A OUTPUT -o eth1 -d fc00::/7 -j limit-384 @@ -38176,11 +34192,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-386 -A OUTPUT -o eth1 -d fc00::/7 -j limit-387 -A OUTPUT -o eth1 -d fc00::/7 -j limit-388 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 -A OUTPUT -o eth1 -d fc00::/7 -j limit-390 -A OUTPUT -o eth1 -d fc00::/7 -j limit-391 -A OUTPUT -o eth1 -d fc00::/7 -j limit-392 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-150 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 -A OUTPUT -o eth1 -d fc00::/7 -j limit-394 -A OUTPUT -o eth1 -d fc00::/7 -j limit-395 -A OUTPUT -o eth1 -d fc00::/7 -j limit-396 @@ -38188,11 +34204,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-398 -A OUTPUT -o eth1 -d fc00::/7 -j limit-399 -A OUTPUT -o eth1 -d fc00::/7 -j limit-400 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-158 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-157 -A OUTPUT -o eth1 -d fc00::/7 -j limit-402 -A OUTPUT -o eth1 -d fc00::/7 -j limit-403 -A OUTPUT -o eth1 -d fc00::/7 -j limit-404 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-162 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 -A OUTPUT -o eth1 -d fc00::/7 -j limit-406 -A OUTPUT -o eth1 -d fc00::/7 -j limit-407 -A OUTPUT -o eth1 -d fc00::/7 -j limit-408 @@ -38200,11 +34216,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-410 -A OUTPUT -o eth1 -d fc00::/7 -j limit-411 -A OUTPUT -o eth1 -d fc00::/7 -j limit-412 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-170 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 -A OUTPUT -o eth1 -d fc00::/7 -j limit-414 -A OUTPUT -o eth1 -d fc00::/7 -j limit-415 -A OUTPUT -o eth1 -d fc00::/7 -j limit-416 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-174 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-173 -A OUTPUT -o eth1 -d fc00::/7 -j limit-418 -A OUTPUT -o eth1 -d fc00::/7 -j limit-419 -A OUTPUT -o eth1 -d fc00::/7 -j limit-420 @@ -38326,11 +34342,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-536 -A OUTPUT -o eth1 -d fc00::/7 -j limit-537 -A OUTPUT -o eth1 -d fc00::/7 -j limit-538 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 -A OUTPUT -o eth1 -d fc00::/7 -j limit-540 -A OUTPUT -o eth1 -d fc00::/7 -j limit-541 -A OUTPUT -o eth1 -d fc00::/7 -j limit-542 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-192 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 -A OUTPUT -o eth1 -d fc00::/7 -j limit-544 -A OUTPUT -o eth1 -d fc00::/7 -j limit-545 -A OUTPUT -o eth1 -d fc00::/7 -j limit-546 @@ -38338,11 +34354,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-548 -A OUTPUT -o eth1 -d fc00::/7 -j limit-549 -A OUTPUT -o eth1 -d fc00::/7 -j limit-550 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-200 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-199 -A OUTPUT -o eth1 -d fc00::/7 -j limit-552 -A OUTPUT -o eth1 -d fc00::/7 -j limit-553 -A OUTPUT -o eth1 -d fc00::/7 -j limit-554 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-204 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-203 -A OUTPUT -o eth1 -d fc00::/7 -j limit-556 -A OUTPUT -o eth1 -d fc00::/7 -j limit-557 -A OUTPUT -o eth1 -d fc00::/7 -j limit-558 @@ -38350,11 +34366,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-560 -A OUTPUT -o eth1 -d fc00::/7 -j limit-561 -A OUTPUT -o eth1 -d fc00::/7 -j limit-562 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-212 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-211 -A OUTPUT -o eth1 -d fc00::/7 -j limit-564 -A OUTPUT -o eth1 -d fc00::/7 -j limit-565 -A OUTPUT -o eth1 -d fc00::/7 -j limit-566 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-216 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-215 -A OUTPUT -o eth1 -d fc00::/7 -j limit-568 -A OUTPUT -o eth1 -d fc00::/7 -j limit-569 -A OUTPUT -o eth1 -d fc00::/7 -j limit-570 @@ -38362,11 +34378,11 @@ COMMIT -A OUTPUT -o eth1 -d fc00::/7 -j limit-572 -A OUTPUT -o eth1 -d fc00::/7 -j limit-573 -A OUTPUT -o eth1 -d fc00::/7 -j limit-574 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-224 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 -A OUTPUT -o eth1 -d fc00::/7 -j limit-576 -A OUTPUT -o eth1 -d fc00::/7 -j limit-577 -A OUTPUT -o eth1 -d fc00::/7 -j limit-578 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-228 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-227 -A OUTPUT -o eth1 -d fc00::/7 -j limit-580 -A OUTPUT -o eth1 -d fc00::/7 -j limit-581 -A OUTPUT -o eth1 -d fc00::/7 -j limit-582 @@ -38882,20 +34898,17 @@ COMMIT -A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-457 +-A OUTPUT -j logdrop-456 -A OUTPUT -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-84 --A OUTPUT -j logdrop-458 --A OUTPUT -j logpass-50 +-A OUTPUT -j logaccept-21 +-A OUTPUT -j logdrop-457 +-A OUTPUT -j logpass-0 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -p tcp --dport 80 -j ACCEPT --A OUTPUT -p esp -j ACCEPT --A OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -A OUTPUT -p icmpv6 -j ACCEPT @@ -38903,11 +34916,11 @@ COMMIT -A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT -A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT -A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT --A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1 +-A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-0 -A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-2 +-A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1 -A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 +-A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 -A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-100 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-100 -j ACCEPT @@ -39065,132 +35078,132 @@ COMMIT -A limit-1072 -j DROP -A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1073 -j RETURN -A limit-1073 -j DROP --A limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-343 +-A limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-342 -A limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-344 +-A limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-343 -A limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-345 +-A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-344 -A limit-1076 -m limit --limit 1/second -j LOG -A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-346 +-A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-345 -A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-347 +-A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-346 -A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-348 +-A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-347 -A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-108 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-108 -j ACCEPT --A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-349 +-A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-348 -A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-350 +-A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-349 -A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-351 +-A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-350 -A limit-1082 -m limit --limit 1/second -j LOG -A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-352 +-A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-351 -A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-353 +-A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-352 -A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-354 +-A limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-353 -A limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-355 +-A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-354 -A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-356 +-A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-355 -A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-357 +-A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-356 -A limit-1088 -m limit --limit 1/second -j LOG -A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-358 +-A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-357 -A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-109 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-359 +-A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-358 -A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-360 +-A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-359 -A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-361 +-A limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-360 -A limit-1092 -j ACCEPT --A limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-363 +-A limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-362 -A limit-1094 -m limit --limit 1/second -j LOG -A limit-1094 -j ACCEPT --A limit-1095 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-364 +-A limit-1095 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-363 -A limit-1095 -m limit --limit 1/second -j LOG --A limit-1096 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-365 +-A limit-1096 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-364 -A limit-1096 -j ACCEPT --A limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-367 +-A limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-366 -A limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-368 +-A limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-367 -A limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 +-A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 -A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-110 -m limit --limit 1/second -j LOG -A limit-110 -j ACCEPT --A limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-369 +-A limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-368 -A limit-1100 -m limit --limit 1/second -j LOG -A limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-370 +-A limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-369 -A limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-371 +-A limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-370 -A limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-372 +-A limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-371 -A limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-373 +-A limit-1104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-372 -A limit-1104 -j ACCEPT --A limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-375 +-A limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-374 -A limit-1106 -m limit --limit 1/second -j LOG -A limit-1106 -j ACCEPT --A limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-376 +-A limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-375 -A limit-1107 -m limit --limit 1/second -j LOG --A limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-377 +-A limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-376 -A limit-1108 -j ACCEPT -A limit-111 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-111 -m limit --limit 1/second -j LOG --A limit-1110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-379 +-A limit-1110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-378 -A limit-1110 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-380 +-A limit-1111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-379 -A limit-1111 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1112 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-381 +-A limit-1112 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-380 -A limit-1112 -m limit --limit 1/second -j LOG -A limit-1112 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1113 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-382 +-A limit-1113 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-381 -A limit-1113 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1114 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-383 +-A limit-1114 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-382 -A limit-1114 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1115 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-384 +-A limit-1115 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-383 -A limit-1115 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1116 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-385 +-A limit-1116 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-384 -A limit-1116 -j ACCEPT --A limit-1118 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-387 +-A limit-1118 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-386 -A limit-1118 -m limit --limit 1/second -j LOG -A limit-1118 -j ACCEPT --A limit-1119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-388 +-A limit-1119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-387 -A limit-1119 -m limit --limit 1/second -j LOG -A limit-112 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-112 -j ACCEPT --A limit-1120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-389 +-A limit-1120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-388 -A limit-1120 -j ACCEPT --A limit-1122 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-391 +-A limit-1122 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-390 -A limit-1122 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1123 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-392 +-A limit-1123 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-391 -A limit-1123 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1124 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-393 +-A limit-1124 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-392 -A limit-1124 -m limit --limit 1/second -j LOG -A limit-1124 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-394 +-A limit-1125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-393 -A limit-1125 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-395 +-A limit-1126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-394 -A limit-1126 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-396 +-A limit-1127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-395 -A limit-1127 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1128 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-397 +-A limit-1128 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-396 -A limit-1128 -j ACCEPT -A limit-113 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1130 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-399 +-A limit-1130 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-398 -A limit-1130 -m limit --limit 1/second -j LOG -A limit-1130 -j ACCEPT --A limit-1131 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-400 +-A limit-1131 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-399 -A limit-1131 -m limit --limit 1/second -j LOG --A limit-1132 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-401 +-A limit-1132 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-400 -A limit-1132 -j ACCEPT -A limit-1134 -m recent --name limit-1134 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1134 -m recent --name limit-1134 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -39332,7 +35345,7 @@ COMMIT -A limit-1198 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 +-A limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 -A limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -39420,116 +35433,116 @@ COMMIT -A limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1240 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1240 -j ACCEPT --A limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-403 +-A limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-402 -A limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-404 +-A limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-403 -A limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-405 +-A limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-404 -A limit-1244 -m limit --limit 1/second -j LOG -A limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-406 +-A limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-405 -A limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-407 +-A limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-406 -A limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-408 +-A limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-407 -A limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-409 +-A limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-408 -A limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-410 +-A limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-409 -A limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-411 +-A limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-410 -A limit-1250 -m limit --limit 1/second -j LOG -A limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-412 +-A limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-411 -A limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-413 +-A limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-412 -A limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-414 +-A limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-413 -A limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1254 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-415 +-A limit-1254 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-414 -A limit-1254 -j ACCEPT --A limit-1256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-417 +-A limit-1256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-416 -A limit-1256 -m limit --limit 1/second -j LOG -A limit-1256 -j ACCEPT --A limit-1257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-418 +-A limit-1257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-417 -A limit-1257 -m limit --limit 1/second -j LOG --A limit-1258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-419 +-A limit-1258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-418 -A limit-1258 -j ACCEPT -A limit-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-126 -j ACCEPT --A limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-421 +-A limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-420 -A limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-422 +-A limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-421 -A limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-423 +-A limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-422 -A limit-1262 -m limit --limit 1/second -j LOG -A limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-424 +-A limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-423 -A limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-425 +-A limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-424 -A limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-426 +-A limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-425 -A limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-427 +-A limit-1266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-426 -A limit-1266 -j ACCEPT --A limit-1268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-429 +-A limit-1268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-428 -A limit-1268 -m limit --limit 1/second -j LOG -A limit-1268 -j ACCEPT --A limit-1269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-430 +-A limit-1269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-429 -A limit-1269 -m limit --limit 1/second -j LOG -A limit-127 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-431 +-A limit-1270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-430 -A limit-1270 -j ACCEPT --A limit-1272 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-433 +-A limit-1272 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-432 -A limit-1272 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1273 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-434 +-A limit-1273 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-433 -A limit-1273 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1274 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-435 +-A limit-1274 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-434 -A limit-1274 -m limit --limit 1/second -j LOG -A limit-1274 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1275 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-436 +-A limit-1275 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-435 -A limit-1275 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1276 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-437 +-A limit-1276 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-436 -A limit-1276 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1277 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-438 +-A limit-1277 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-437 -A limit-1277 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1278 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-439 +-A limit-1278 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-438 -A limit-1278 -j ACCEPT -A limit-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-128 -m limit --limit 1/second -j LOG -A limit-128 -j ACCEPT --A limit-1280 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-441 +-A limit-1280 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-440 -A limit-1280 -m limit --limit 1/second -j LOG -A limit-1280 -j ACCEPT --A limit-1281 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-442 +-A limit-1281 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-441 -A limit-1281 -m limit --limit 1/second -j LOG --A limit-1282 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-443 +-A limit-1282 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-442 -A limit-1282 -j ACCEPT --A limit-1284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-445 +-A limit-1284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-444 -A limit-1284 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-446 +-A limit-1285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-445 -A limit-1285 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-447 +-A limit-1286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-446 -A limit-1286 -m limit --limit 1/second -j LOG -A limit-1286 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-448 +-A limit-1287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-447 -A limit-1287 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1288 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-449 +-A limit-1288 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-448 -A limit-1288 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1289 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-450 +-A limit-1289 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-449 -A limit-1289 -m recent --name user:C --rdest --mask fe00:: --set -A limit-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-129 -m limit --limit 1/second -j LOG --A limit-1290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-451 +-A limit-1290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-450 -A limit-1290 -j ACCEPT --A limit-1292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-453 +-A limit-1292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-452 -A limit-1292 -m limit --limit 1/second -j LOG -A limit-1292 -j ACCEPT --A limit-1293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-454 +-A limit-1293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-453 -A limit-1293 -m limit --limit 1/second -j LOG --A limit-1294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-455 +-A limit-1294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-454 -A limit-1294 -j ACCEPT -A limit-1296 -m recent --name limit-1296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1296 -m recent --name limit-1296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -39540,7 +35553,7 @@ COMMIT -A limit-1298 -m recent --name limit-1298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1299 -m recent --name limit-1299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1299 -m recent --name limit-1299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 +-A limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 -A limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-130 -j ACCEPT @@ -39747,7 +35760,7 @@ COMMIT -A limit-1397 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1398 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1398 -j ACCEPT --A limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 +-A limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 -A limit-14 -m limit --limit 1/second -j LOG -A limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP @@ -39766,7 +35779,7 @@ COMMIT -A limit-1405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1405 -j RETURN -A limit-1405 -m limit --limit 1/second -j LOG -A limit-1405 -j DROP --A limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1406 -j logaccept-77 +-A limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1406 -j logaccept-14 -A limit-1406 -m limit --limit 1/second -j LOG -A limit-1406 -j DROP -A limit-1407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1407 -j ACCEPT @@ -39780,7 +35793,7 @@ COMMIT -A limit-1409 -j DROP -A limit-141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-141 -m limit --limit 1/second -j LOG --A limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1410 -j logaccept-78 +-A limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1410 -j logaccept-15 -A limit-1410 -m limit --limit 1/second -j LOG -A limit-1410 -j DROP -A limit-1411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1411 -j ACCEPT @@ -39790,7 +35803,7 @@ COMMIT -A limit-1412 -j DROP -A limit-1413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1413 -j RETURN -A limit-1413 -j DROP --A limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1414 -j logaccept-79 +-A limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1414 -j logaccept-16 -A limit-1414 -j DROP -A limit-1415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1415 -j ACCEPT -A limit-1415 -j DROP @@ -39798,7 +35811,7 @@ COMMIT -A limit-1416 -j DROP -A limit-1417 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1417 -j RETURN -A limit-1417 -j DROP --A limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1418 -j logaccept-80 +-A limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1418 -j logaccept-17 -A limit-1418 -j DROP -A limit-1419 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1419 -j ACCEPT -A limit-1419 -j DROP @@ -39810,7 +35823,7 @@ COMMIT -A limit-1421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1421 -j RETURN -A limit-1421 -m limit --limit 1/second -j LOG -A limit-1421 -j DROP --A limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1422 -j logaccept-81 +-A limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1422 -j logaccept-18 -A limit-1422 -m limit --limit 1/second -j LOG -A limit-1422 -j DROP -A limit-1423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1423 -j ACCEPT @@ -39820,7 +35833,7 @@ COMMIT -A limit-1424 -j DROP -A limit-1425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1425 -j RETURN -A limit-1425 -j DROP --A limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1426 -j logaccept-82 +-A limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1426 -j logaccept-19 -A limit-1426 -j DROP -A limit-1427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1427 -j ACCEPT -A limit-1427 -j DROP @@ -39829,7 +35842,7 @@ COMMIT -A limit-1429 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1429 -j RETURN -A limit-1429 -j DROP -A limit-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1430 -j logaccept-83 +-A limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1430 -j logaccept-20 -A limit-1430 -j DROP -A limit-1431 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1431 -j ACCEPT -A limit-1431 -j DROP @@ -39846,7 +35859,7 @@ COMMIT -A limit-148 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-149 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-149 -m recent --name user:C --rsource --mask fe00:: --set --A limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 +-A limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 -A limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-150 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-150 -j ACCEPT @@ -39868,7 +35881,7 @@ COMMIT -A limit-158 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-159 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-159 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 +-A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 -A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-160 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-160 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT @@ -39885,130 +35898,130 @@ COMMIT -A limit-166 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-166 -j ACCEPT -A limit-167 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-61 +-A limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-60 -A limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-62 +-A limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-61 -A limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-18 +-A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 -A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-63 +-A limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-62 -A limit-170 -m limit --limit 1/second -j LOG -A limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-64 +-A limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-63 -A limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-65 +-A limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-64 -A limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-66 +-A limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-65 -A limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-67 +-A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-66 -A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-68 +-A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-67 -A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-69 +-A limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-68 -A limit-176 -m limit --limit 1/second -j LOG -A limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-70 +-A limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-69 -A limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-71 +-A limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-70 -A limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-72 +-A limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-71 -A limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-19 +-A limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-18 -A limit-18 -j ACCEPT --A limit-180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-73 +-A limit-180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-72 -A limit-180 -j ACCEPT --A limit-181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 --A limit-182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-75 +-A limit-181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-73 +-A limit-182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 -A limit-182 -m limit --limit 1/second -j LOG -A limit-182 -j ACCEPT --A limit-183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-76 +-A limit-183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-75 -A limit-183 -m limit --limit 1/second -j LOG --A limit-184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-77 +-A limit-184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-76 -A limit-184 -j ACCEPT --A limit-185 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-78 --A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-79 +-A limit-185 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-77 +-A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-78 -A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-80 +-A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-79 -A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-81 +-A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-80 -A limit-188 -m limit --limit 1/second -j LOG -A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-82 +-A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-81 -A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-19 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-20 --A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-83 +-A limit-19 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-19 +-A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-82 -A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-84 +-A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-83 -A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-192 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-85 +-A limit-192 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-84 -A limit-192 -j ACCEPT --A limit-193 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 --A limit-194 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-87 +-A limit-193 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-85 +-A limit-194 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 -A limit-194 -m limit --limit 1/second -j LOG -A limit-194 -j ACCEPT --A limit-195 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-88 +-A limit-195 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-87 -A limit-195 -m limit --limit 1/second -j LOG --A limit-196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-89 +-A limit-196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-88 -A limit-196 -j ACCEPT --A limit-197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-90 --A limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-91 +-A limit-197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-89 +-A limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-90 -A limit-198 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-92 +-A limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-91 -A limit-199 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 +-A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-2 -A limit-2 -m limit --limit 1/second -j LOG -A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-21 +-A limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-20 -A limit-20 -m limit --limit 1/second -j LOG -A limit-20 -j ACCEPT --A limit-200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-93 +-A limit-200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-92 -A limit-200 -m limit --limit 1/second -j LOG -A limit-200 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-94 +-A limit-201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-93 -A limit-201 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-202 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-95 +-A limit-202 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-94 -A limit-202 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-203 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-96 +-A limit-203 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-95 -A limit-203 -m recent --name user:C --rsource --mask fe00:: --set --A limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-97 +-A limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-96 -A limit-204 -j ACCEPT --A limit-205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 --A limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-99 +-A limit-205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-97 +-A limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 -A limit-206 -m limit --limit 1/second -j LOG -A limit-206 -j ACCEPT --A limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-100 +-A limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-99 -A limit-207 -m limit --limit 1/second -j LOG --A limit-208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-101 +-A limit-208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-100 -A limit-208 -j ACCEPT --A limit-209 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-102 --A limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-22 +-A limit-209 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-101 +-A limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-21 -A limit-21 -m limit --limit 1/second -j LOG --A limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-103 +-A limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-102 -A limit-210 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-104 +-A limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-103 -A limit-211 -m recent --name user:C --rdest --mask fe00:: --set --A limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-105 +-A limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-104 -A limit-212 -m limit --limit 1/second -j LOG -A limit-212 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-106 +-A limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-105 -A limit-213 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-107 +-A limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-106 -A limit-214 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-108 +-A limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-107 -A limit-215 -m recent --name user:C --rdest --mask fe00:: --set --A limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-109 +-A limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-108 -A limit-216 -j ACCEPT --A limit-217 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 --A limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-111 +-A limit-217 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-109 +-A limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 -A limit-218 -m limit --limit 1/second -j LOG -A limit-218 -j ACCEPT --A limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-112 +-A limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-111 -A limit-219 -m limit --limit 1/second -j LOG --A limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-23 +-A limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-22 -A limit-22 -j ACCEPT --A limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-113 +-A limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-112 -A limit-220 -j ACCEPT --A limit-221 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-114 +-A limit-221 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-113 -A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP @@ -40026,7 +36039,7 @@ COMMIT -A limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-24 +-A limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-23 -A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-230 -m limit --limit 1/second -j LOG -A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -40047,7 +36060,7 @@ COMMIT -A limit-238 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-238 -j ACCEPT -A limit-239 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 +-A limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-24 -A limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -40070,7 +36083,7 @@ COMMIT -A limit-248 -j ACCEPT -A limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-249 -m limit --limit 1/second -j LOG --A limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 +-A limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 -A limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-250 -j ACCEPT @@ -40091,7 +36104,7 @@ COMMIT -A limit-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-258 -j ACCEPT -A limit-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 +-A limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 -A limit-26 -m limit --limit 1/second -j LOG -A limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-260 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP @@ -40115,7 +36128,7 @@ COMMIT -A limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-269 -m recent --name user:C --rdest --mask fe00:: --set --A limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 +-A limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 -A limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-270 -j ACCEPT @@ -40137,7 +36150,7 @@ COMMIT -A limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 +-A limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 -A limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -40159,7 +36172,7 @@ COMMIT -A limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-288 -j ACCEPT -A limit-289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-30 +-A limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 -A limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-290 -m limit --limit 1/second -j LOG @@ -40182,9 +36195,9 @@ COMMIT -A limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 +-A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 -A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-30 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 +-A limit-30 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-30 -A limit-30 -j ACCEPT -A limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-300 -j ACCEPT @@ -40206,7 +36219,7 @@ COMMIT -A limit-308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-309 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-31 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 +-A limit-31 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 -A limit-310 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-311 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP @@ -40226,7 +36239,7 @@ COMMIT -A limit-318 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-319 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-319 -m recent --name user:C --rdest --mask fe00:: --set --A limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 +-A limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 -A limit-32 -m limit --limit 1/second -j LOG -A limit-32 -j ACCEPT -A limit-320 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP @@ -40249,7 +36262,7 @@ COMMIT -A limit-328 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-328 -j ACCEPT -A limit-329 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 +-A limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 -A limit-33 -m limit --limit 1/second -j LOG -A limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-330 -j ACCEPT -A limit-330 -m limit --limit 1/second -j LOG @@ -40257,7 +36270,7 @@ COMMIT -A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-331 -j RETURN -A limit-331 -m limit --limit 1/second -j LOG -A limit-331 -j DROP --A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-63 +-A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-0 -A limit-332 -m limit --limit 1/second -j LOG -A limit-332 -j DROP -A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-333 -j ACCEPT @@ -40269,7 +36282,7 @@ COMMIT -A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-335 -j RETURN -A limit-335 -m limit --limit 1/second -j LOG -A limit-335 -j DROP --A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-64 +-A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-1 -A limit-336 -m limit --limit 1/second -j LOG -A limit-336 -j DROP -A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-337 -j ACCEPT @@ -40279,9 +36292,9 @@ COMMIT -A limit-338 -j DROP -A limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-339 -j RETURN -A limit-339 -j DROP --A limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 +-A limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 -A limit-34 -j ACCEPT --A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-65 +-A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-2 -A limit-340 -j DROP -A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-341 -j ACCEPT -A limit-341 -j DROP @@ -40289,7 +36302,7 @@ COMMIT -A limit-342 -j DROP -A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-343 -j RETURN -A limit-343 -j DROP --A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-66 +-A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-3 -A limit-344 -j DROP -A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-345 -j ACCEPT -A limit-345 -j DROP @@ -40299,18 +36312,18 @@ COMMIT -A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-347 -j RETURN -A limit-347 -m limit --limit 1/second -j LOG -A limit-347 -j DROP --A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-67 +-A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-4 -A limit-348 -m limit --limit 1/second -j LOG -A limit-348 -j DROP -A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-349 -j ACCEPT -A limit-349 -m limit --limit 1/second -j LOG -A limit-349 -j DROP --A limit-35 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36 +-A limit-35 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 -A limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-350 -j ACCEPT -A limit-350 -j DROP -A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-351 -j RETURN -A limit-351 -j DROP --A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-68 +-A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-5 -A limit-352 -j DROP -A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-353 -j ACCEPT -A limit-353 -j DROP @@ -40318,144 +36331,144 @@ COMMIT -A limit-354 -j DROP -A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-355 -j RETURN -A limit-355 -j DROP --A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-69 +-A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-6 -A limit-356 -j DROP -A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-357 -j ACCEPT -A limit-357 -j DROP --A limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 +-A limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-114 -A limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 +-A limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 -A limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-36 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-37 +-A limit-36 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-36 -A limit-36 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 +-A limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 -A limit-360 -m limit --limit 1/second -j LOG -A limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 +-A limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 -A limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 +-A limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 -A limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-120 +-A limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 -A limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-121 +-A limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-120 -A limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-122 +-A limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-121 -A limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-123 +-A limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-122 -A limit-366 -m limit --limit 1/second -j LOG -A limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-124 +-A limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-123 -A limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-125 +-A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-124 -A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-126 +-A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-125 -A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-37 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-38 +-A limit-37 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-37 -A limit-37 -m recent --name user:C --rsource --mask fe00:: --set --A limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-127 +-A limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-126 -A limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-128 +-A limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-127 -A limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-129 +-A limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-128 -A limit-372 -m limit --limit 1/second -j LOG -A limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 +-A limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-129 -A limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 +-A limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 -A limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 -A limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-133 +-A limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-132 -A limit-376 -j ACCEPT --A limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-135 +-A limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-134 -A limit-378 -m limit --limit 1/second -j LOG -A limit-378 -j ACCEPT --A limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-136 +-A limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-135 -A limit-379 -m limit --limit 1/second -j LOG --A limit-38 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-39 +-A limit-38 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-38 -A limit-38 -m limit --limit 1/second -j LOG -A limit-38 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-137 +-A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-136 -A limit-380 -j ACCEPT --A limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 +-A limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-138 -A limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 +-A limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 -A limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 +-A limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 -A limit-384 -m limit --limit 1/second -j LOG -A limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 +-A limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 -A limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 +-A limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 -A limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-144 +-A limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 -A limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 +-A limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-144 -A limit-388 -j ACCEPT --A limit-39 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-40 +-A limit-39 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-39 -A limit-39 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 +-A limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 -A limit-390 -m limit --limit 1/second -j LOG -A limit-390 -j ACCEPT --A limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 +-A limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 -A limit-391 -m limit --limit 1/second -j LOG --A limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 +-A limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 -A limit-392 -j ACCEPT --A limit-394 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 +-A limit-394 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-150 -A limit-394 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-395 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 +-A limit-395 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 -A limit-395 -m recent --name user:C --rsource --mask fe00:: --set --A limit-396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 +-A limit-396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 -A limit-396 -m limit --limit 1/second -j LOG -A limit-396 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 +-A limit-397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 -A limit-397 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 +-A limit-398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 -A limit-398 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-156 +-A limit-399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 -A limit-399 -m recent --name user:C --rsource --mask fe00:: --set --A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 +-A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 -A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-40 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-41 +-A limit-40 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-40 -A limit-40 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-400 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-157 +-A limit-400 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-156 -A limit-400 -j ACCEPT --A limit-402 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-159 +-A limit-402 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-158 -A limit-402 -m limit --limit 1/second -j LOG -A limit-402 -j ACCEPT --A limit-403 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 +-A limit-403 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-159 -A limit-403 -m limit --limit 1/second -j LOG --A limit-404 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 +-A limit-404 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 -A limit-404 -j ACCEPT --A limit-406 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-163 +-A limit-406 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-162 -A limit-406 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-407 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-164 +-A limit-407 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-163 -A limit-407 -m recent --name user:C --rdest --mask fe00:: --set --A limit-408 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-165 +-A limit-408 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-164 -A limit-408 -m limit --limit 1/second -j LOG -A limit-408 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-409 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-166 +-A limit-409 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-165 -A limit-409 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-41 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-42 +-A limit-41 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-41 -A limit-41 -m recent --name user:C --rsource --mask fe00:: --set --A limit-410 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-167 +-A limit-410 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-166 -A limit-410 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-411 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-168 +-A limit-411 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-167 -A limit-411 -m recent --name user:C --rdest --mask fe00:: --set --A limit-412 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 +-A limit-412 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-168 -A limit-412 -j ACCEPT --A limit-414 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-171 +-A limit-414 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-170 -A limit-414 -m limit --limit 1/second -j LOG -A limit-414 -j ACCEPT --A limit-415 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-172 +-A limit-415 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-171 -A limit-415 -m limit --limit 1/second -j LOG --A limit-416 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-173 +-A limit-416 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-172 -A limit-416 -j ACCEPT -A limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-42 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-43 +-A limit-42 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-42 -A limit-42 -j ACCEPT -A limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-420 -m limit --limit 1/second -j LOG @@ -40479,7 +36492,7 @@ COMMIT -A limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-43 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 +-A limit-43 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-43 -A limit-430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-430 -j ACCEPT -A limit-432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP @@ -40498,7 +36511,7 @@ COMMIT -A limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-44 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-45 +-A limit-44 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 -A limit-44 -m limit --limit 1/second -j LOG -A limit-44 -j ACCEPT -A limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP @@ -40518,7 +36531,7 @@ COMMIT -A limit-448 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-449 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-449 -m recent --name user:C --rsource --mask fe00:: --set --A limit-45 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-46 +-A limit-45 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-45 -A limit-45 -m limit --limit 1/second -j LOG -A limit-450 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-450 -m limit --limit 1/second -j LOG @@ -40538,7 +36551,7 @@ COMMIT -A limit-457 -m limit --limit 1/second -j LOG -A limit-458 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-458 -j ACCEPT --A limit-46 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-47 +-A limit-46 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-46 -A limit-46 -j ACCEPT -A limit-460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-460 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT @@ -40560,7 +36573,7 @@ COMMIT -A limit-468 -j ACCEPT -A limit-469 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-469 -m limit --limit 1/second -j LOG --A limit-47 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-48 +-A limit-47 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-47 -A limit-470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-470 -j ACCEPT -A limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP @@ -40580,7 +36593,7 @@ COMMIT -A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-48 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 +-A limit-48 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-48 -A limit-48 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-480 -m limit --limit 1/second -j LOG @@ -40600,7 +36613,7 @@ COMMIT -A limit-487 -m limit --limit 1/second -j LOG -A limit-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-488 -j ACCEPT --A limit-49 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-49 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 -A limit-49 -m recent --name user:C --rdest --mask fe00:: --set -A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -40622,9 +36635,9 @@ COMMIT -A limit-498 -j ACCEPT -A limit-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-499 -m limit --limit 1/second -j LOG --A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 +-A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 -A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-50 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 +-A limit-50 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 -A limit-50 -m limit --limit 1/second -j LOG -A limit-50 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP @@ -40644,7 +36657,7 @@ COMMIT -A limit-507 -m recent --name user:C --rsource --mask fe00:: --set -A limit-508 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-508 -j ACCEPT --A limit-51 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 +-A limit-51 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 -A limit-51 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-510 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-510 -m limit --limit 1/second -j LOG @@ -40666,7 +36679,7 @@ COMMIT -A limit-518 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-519 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-519 -m recent --name user:C --rdest --mask fe00:: --set --A limit-52 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 +-A limit-52 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 -A limit-52 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-520 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-520 -j ACCEPT @@ -40677,118 +36690,118 @@ COMMIT -A limit-523 -m limit --limit 1/second -j LOG -A limit-524 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-524 -j ACCEPT --A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 +-A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-174 -A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 +-A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 -A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 +-A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 -A limit-528 -m limit --limit 1/second -j LOG -A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 +-A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 -A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-53 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-54 +-A limit-53 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 -A limit-53 -m recent --name user:C --rdest --mask fe00:: --set --A limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 +-A limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 -A limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 +-A limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 -A limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 +-A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 -A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 +-A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 -A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 +-A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 -A limit-534 -m limit --limit 1/second -j LOG -A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-184 +-A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 -A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-185 +-A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-184 -A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-186 +-A limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-185 -A limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 +-A limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-186 -A limit-538 -j ACCEPT --A limit-54 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-54 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-54 -A limit-54 -j ACCEPT --A limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 +-A limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 -A limit-540 -m limit --limit 1/second -j LOG -A limit-540 -j ACCEPT --A limit-541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 +-A limit-541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 -A limit-541 -m limit --limit 1/second -j LOG --A limit-542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 +-A limit-542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 -A limit-542 -j ACCEPT --A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-193 +-A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-192 -A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-194 +-A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-193 -A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-195 +-A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-194 -A limit-546 -m limit --limit 1/second -j LOG -A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-196 +-A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-195 -A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-197 +-A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-196 -A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-198 +-A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-197 -A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-55 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 --A limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-199 +-A limit-55 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-198 -A limit-550 -j ACCEPT --A limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-201 +-A limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-200 -A limit-552 -m limit --limit 1/second -j LOG -A limit-552 -j ACCEPT --A limit-553 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-202 +-A limit-553 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-201 -A limit-553 -m limit --limit 1/second -j LOG --A limit-554 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-203 +-A limit-554 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-202 -A limit-554 -j ACCEPT --A limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-205 +-A limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-204 -A limit-556 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-206 +-A limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-205 -A limit-557 -m recent --name user:C --rsource --mask fe00:: --set --A limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-207 +-A limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-206 -A limit-558 -m limit --limit 1/second -j LOG -A limit-558 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 +-A limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-207 -A limit-559 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-56 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 +-A limit-56 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 -A limit-56 -m limit --limit 1/second -j LOG -A limit-56 -j ACCEPT --A limit-560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 +-A limit-560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 -A limit-560 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-210 +-A limit-561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 -A limit-561 -m recent --name user:C --rsource --mask fe00:: --set --A limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-211 +-A limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-210 -A limit-562 -j ACCEPT --A limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-213 +-A limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-212 -A limit-564 -m limit --limit 1/second -j LOG -A limit-564 -j ACCEPT --A limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-214 +-A limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-213 -A limit-565 -m limit --limit 1/second -j LOG --A limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-215 +-A limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-214 -A limit-566 -j ACCEPT --A limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-217 +-A limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-216 -A limit-568 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-218 +-A limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-217 -A limit-569 -m recent --name user:C --rdest --mask fe00:: --set --A limit-57 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 +-A limit-57 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 -A limit-57 -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-219 +-A limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-218 -A limit-570 -m limit --limit 1/second -j LOG -A limit-570 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-220 +-A limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-219 -A limit-571 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-221 +-A limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-220 -A limit-572 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-222 +-A limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-221 -A limit-573 -m recent --name user:C --rdest --mask fe00:: --set --A limit-574 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 +-A limit-574 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-222 -A limit-574 -j ACCEPT --A limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-225 +-A limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-224 -A limit-576 -m limit --limit 1/second -j LOG -A limit-576 -j ACCEPT --A limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-226 +-A limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-225 -A limit-577 -m limit --limit 1/second -j LOG --A limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-227 +-A limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-226 -A limit-578 -j ACCEPT --A limit-58 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 +-A limit-58 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 -A limit-58 -j ACCEPT -A limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -40812,7 +36825,7 @@ COMMIT -A limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-59 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60 +-A limit-59 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 -A limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP @@ -40830,7 +36843,7 @@ COMMIT -A limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 +-A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 -A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -41023,7 +37036,7 @@ COMMIT -A limit-689 -j DROP -A limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-690 -j logaccept-70 +-A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-690 -j logaccept-7 -A limit-690 -m limit --limit 1/second -j LOG -A limit-690 -j DROP -A limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-691 -j ACCEPT @@ -41035,7 +37048,7 @@ COMMIT -A limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-693 -j RETURN -A limit-693 -m limit --limit 1/second -j LOG -A limit-693 -j DROP --A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-694 -j logaccept-71 +-A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-694 -j logaccept-8 -A limit-694 -m limit --limit 1/second -j LOG -A limit-694 -j DROP -A limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-695 -j ACCEPT @@ -41045,11 +37058,11 @@ COMMIT -A limit-696 -j DROP -A limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-697 -j RETURN -A limit-697 -j DROP --A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-698 -j logaccept-72 +-A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-698 -j logaccept-9 -A limit-698 -j DROP -A limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-699 -j ACCEPT -A limit-699 -j DROP --A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 +-A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 -A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -41057,7 +37070,7 @@ COMMIT -A limit-700 -j DROP -A limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-701 -j RETURN -A limit-701 -j DROP --A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-702 -j logaccept-73 +-A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-702 -j logaccept-10 -A limit-702 -j DROP -A limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-703 -j ACCEPT -A limit-703 -j DROP @@ -41067,7 +37080,7 @@ COMMIT -A limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-705 -j RETURN -A limit-705 -m limit --limit 1/second -j LOG -A limit-705 -j DROP --A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-706 -j logaccept-74 +-A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-706 -j logaccept-11 -A limit-706 -m limit --limit 1/second -j LOG -A limit-706 -j DROP -A limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-707 -j ACCEPT @@ -41079,7 +37092,7 @@ COMMIT -A limit-709 -j DROP -A limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-710 -j logaccept-75 +-A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-710 -j logaccept-12 -A limit-710 -j DROP -A limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-711 -j ACCEPT -A limit-711 -j DROP @@ -41087,121 +37100,121 @@ COMMIT -A limit-712 -j DROP -A limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-713 -j RETURN -A limit-713 -j DROP --A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-714 -j logaccept-76 +-A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-714 -j logaccept-13 -A limit-714 -j DROP -A limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-715 -j ACCEPT -A limit-715 -j DROP --A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 +-A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-228 -A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-230 +-A limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 -A limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-231 +-A limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-230 -A limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-232 +-A limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-231 -A limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-72 -j ACCEPT --A limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-233 +-A limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-232 -A limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-234 +-A limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-233 -A limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-235 +-A limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-234 -A limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-236 +-A limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-235 -A limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-237 +-A limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-236 -A limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-238 +-A limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-237 -A limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-239 +-A limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-238 -A limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-240 +-A limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-239 -A limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-241 +-A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-240 -A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-242 +-A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-241 -A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-73 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-243 +-A limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-242 -A limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-244 +-A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-243 -A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-245 +-A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-244 -A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-245 -A limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-247 --A limit-735 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 --A limit-736 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-249 --A limit-737 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-735 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-247 +-A limit-736 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 +-A limit-737 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-249 -A limit-737 -m limit --limit 1/second -j LOG --A limit-738 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-251 --A limit-739 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-252 +-A limit-738 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-739 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-251 -A limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-74 -m limit --limit 1/second -j LOG -A limit-74 -j ACCEPT --A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-253 +-A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-252 -A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-254 +-A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-253 -A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-255 +-A limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-254 -A limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-256 +-A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-255 -A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-257 +-A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-256 -A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-258 +-A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-257 -A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-259 --A limit-747 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 --A limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-261 --A limit-749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-262 +-A limit-746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-258 +-A limit-747 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-259 +-A limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 +-A limit-749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-261 -A limit-749 -m limit --limit 1/second -j LOG -A limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-75 -m limit --limit 1/second -j LOG --A limit-750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-263 --A limit-751 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-264 --A limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 +-A limit-750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-262 +-A limit-751 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-263 +-A limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-264 -A limit-752 -m recent --name user:C --rsource --mask fe00:: --set --A limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 +-A limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 -A limit-753 -m recent --name user:C --rsource --mask fe00:: --set --A limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 +-A limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 -A limit-754 -m recent --name user:C --rsource --mask fe00:: --set --A limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 +-A limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 -A limit-755 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 +-A limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 -A limit-756 -m recent --name user:C --rsource --mask fe00:: --set --A limit-757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 -A limit-757 -m recent --name user:C --rsource --mask fe00:: --set --A limit-758 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 --A limit-759 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A limit-758 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-759 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 -A limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-76 -j ACCEPT --A limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 --A limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 -A limit-761 -m limit --limit 1/second -j LOG --A limit-762 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 --A limit-763 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-276 --A limit-764 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-277 +-A limit-762 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-763 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 +-A limit-764 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-276 -A limit-764 -m recent --name user:C --rdest --mask fe00:: --set --A limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-278 +-A limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-277 -A limit-765 -m recent --name user:C --rdest --mask fe00:: --set --A limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-279 +-A limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-278 -A limit-766 -m recent --name user:C --rdest --mask fe00:: --set --A limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-280 +-A limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-279 -A limit-767 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-281 +-A limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-280 -A limit-768 -m recent --name user:C --rdest --mask fe00:: --set --A limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-282 +-A limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-281 -A limit-769 -m recent --name user:C --rdest --mask fe00:: --set -A limit-77 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-283 --A limit-771 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284 --A limit-772 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-285 --A limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-286 +-A limit-770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-282 +-A limit-771 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-283 +-A limit-772 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284 +-A limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-285 -A limit-773 -m limit --limit 1/second -j LOG --A limit-774 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-287 --A limit-775 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-288 +-A limit-774 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-286 +-A limit-775 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-287 -A limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP @@ -41249,7 +37262,7 @@ COMMIT -A limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 +-A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 -A limit-8 -m limit --limit 1/second -j LOG -A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP @@ -41404,106 +37417,106 @@ COMMIT -A limit-881 -m limit --limit 1/second -j LOG -A limit-882 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-883 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 +-A limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-288 -A limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 +-A limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 -A limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 +-A limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 -A limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 +-A limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 -A limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 +-A limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 -A limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 +-A limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 -A limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-89 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 +-A limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 -A limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 +-A limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 -A limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 +-A limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 -A limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 +-A limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 -A limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 +-A limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 -A limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 -A limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-896 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 --A limit-897 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 --A limit-898 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 --A limit-899 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-896 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-897 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 +-A limit-898 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 +-A limit-899 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 -A limit-899 -m limit --limit 1/second -j LOG --A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 +-A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 -A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-90 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-90 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-900 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 --A limit-901 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-306 --A limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-307 +-A limit-900 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-901 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 +-A limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-306 -A limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-308 +-A limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-307 -A limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-309 +-A limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-308 -A limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 +-A limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-309 -A limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 +-A limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 -A limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 -A limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-908 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-313 --A limit-909 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-314 +-A limit-908 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-909 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-313 -A limit-91 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-91 -m recent --name user:C --rsource --mask fe00:: --set --A limit-910 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-315 --A limit-911 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-910 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-314 +-A limit-911 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-315 -A limit-911 -m limit --limit 1/second -j LOG --A limit-912 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-317 --A limit-913 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-318 --A limit-914 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-319 +-A limit-912 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-913 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-317 +-A limit-914 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-318 -A limit-914 -m recent --name user:C --rsource --mask fe00:: --set --A limit-915 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-320 +-A limit-915 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-319 -A limit-915 -m recent --name user:C --rsource --mask fe00:: --set --A limit-916 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-321 +-A limit-916 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-320 -A limit-916 -m recent --name user:C --rsource --mask fe00:: --set --A limit-917 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-322 +-A limit-917 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-321 -A limit-917 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-918 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-323 +-A limit-918 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-322 -A limit-918 -m recent --name user:C --rsource --mask fe00:: --set --A limit-919 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-919 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-323 -A limit-919 -m recent --name user:C --rsource --mask fe00:: --set -A limit-92 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-92 -m limit --limit 1/second -j LOG -A limit-92 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-920 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-325 --A limit-921 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-326 --A limit-922 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-327 --A limit-923 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-920 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-921 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-325 +-A limit-922 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-326 +-A limit-923 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-327 -A limit-923 -m limit --limit 1/second -j LOG --A limit-924 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-329 --A limit-925 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-330 --A limit-926 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 +-A limit-924 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-925 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-329 +-A limit-926 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-330 -A limit-926 -m recent --name user:C --rdest --mask fe00:: --set --A limit-927 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 +-A limit-927 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 -A limit-927 -m recent --name user:C --rdest --mask fe00:: --set --A limit-928 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 +-A limit-928 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 -A limit-928 -m recent --name user:C --rdest --mask fe00:: --set --A limit-929 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 +-A limit-929 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 -A limit-929 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-93 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-93 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-930 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 +-A limit-930 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 -A limit-930 -m recent --name user:C --rdest --mask fe00:: --set --A limit-931 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-931 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 -A limit-931 -m recent --name user:C --rdest --mask fe00:: --set --A limit-932 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-337 --A limit-933 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-338 --A limit-934 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-339 --A limit-935 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-932 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-933 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-337 +-A limit-934 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-338 +-A limit-935 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-339 -A limit-935 -m limit --limit 1/second -j LOG --A limit-936 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 --A limit-937 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-342 +-A limit-936 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-937 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 -A limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP @@ -41622,58 +37635,46 @@ COMMIT -A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT +-A logaccept-1 -m limit --limit 1/second -j LOG +-A logaccept-1 -j ACCEPT +-A logaccept-10 -m limit --limit 1/second -j LOG +-A logaccept-10 -j ACCEPT +-A logaccept-11 -m limit --limit 1/second -j LOG +-A logaccept-11 -j ACCEPT +-A logaccept-12 -m limit --limit 1/second -j LOG +-A logaccept-12 -j ACCEPT +-A logaccept-13 -m limit --limit 1/second -j LOG +-A logaccept-13 -j ACCEPT +-A logaccept-14 -m limit --limit 1/second -j LOG +-A logaccept-14 -j ACCEPT +-A logaccept-15 -m limit --limit 1/second -j LOG +-A logaccept-15 -j ACCEPT +-A logaccept-16 -m limit --limit 1/second -j LOG +-A logaccept-16 -j ACCEPT +-A logaccept-17 -m limit --limit 1/second -j LOG +-A logaccept-17 -j ACCEPT -A logaccept-18 -m limit --limit 1/second -j LOG -A logaccept-18 -j ACCEPT --A logaccept-27 -m limit --limit 1/second -j LOG --A logaccept-27 -j ACCEPT --A logaccept-36 -m limit --limit 1/second -j LOG --A logaccept-36 -j ACCEPT --A logaccept-45 -m limit --limit 1/second -j LOG --A logaccept-45 -j ACCEPT --A logaccept-63 -m limit --limit 1/second -j LOG --A logaccept-63 -j ACCEPT --A logaccept-64 -m limit --limit 1/second -j LOG --A logaccept-64 -j ACCEPT --A logaccept-65 -m limit --limit 1/second -j LOG --A logaccept-65 -j ACCEPT --A logaccept-66 -m limit --limit 1/second -j LOG --A logaccept-66 -j ACCEPT --A logaccept-67 -m limit --limit 1/second -j LOG --A logaccept-67 -j ACCEPT --A logaccept-68 -m limit --limit 1/second -j LOG --A logaccept-68 -j ACCEPT --A logaccept-69 -m limit --limit 1/second -j LOG --A logaccept-69 -j ACCEPT --A logaccept-70 -m limit --limit 1/second -j LOG --A logaccept-70 -j ACCEPT --A logaccept-71 -m limit --limit 1/second -j LOG --A logaccept-71 -j ACCEPT --A logaccept-72 -m limit --limit 1/second -j LOG --A logaccept-72 -j ACCEPT --A logaccept-73 -m limit --limit 1/second -j LOG --A logaccept-73 -j ACCEPT --A logaccept-74 -m limit --limit 1/second -j LOG --A logaccept-74 -j ACCEPT --A logaccept-75 -m limit --limit 1/second -j LOG --A logaccept-75 -j ACCEPT --A logaccept-76 -m limit --limit 1/second -j LOG --A logaccept-76 -j ACCEPT --A logaccept-77 -m limit --limit 1/second -j LOG --A logaccept-77 -j ACCEPT --A logaccept-78 -m limit --limit 1/second -j LOG --A logaccept-78 -j ACCEPT --A logaccept-79 -m limit --limit 1/second -j LOG --A logaccept-79 -j ACCEPT --A logaccept-80 -m limit --limit 1/second -j LOG --A logaccept-80 -j ACCEPT --A logaccept-81 -m limit --limit 1/second -j LOG --A logaccept-81 -j ACCEPT --A logaccept-82 -m limit --limit 1/second -j LOG --A logaccept-82 -j ACCEPT --A logaccept-83 -m limit --limit 1/second -j LOG --A logaccept-83 -j ACCEPT --A logaccept-84 -m limit --limit 1/second -j LOG --A logaccept-84 -j ACCEPT +-A logaccept-19 -m limit --limit 1/second -j LOG +-A logaccept-19 -j ACCEPT +-A logaccept-2 -m limit --limit 1/second -j LOG +-A logaccept-2 -j ACCEPT +-A logaccept-20 -m limit --limit 1/second -j LOG +-A logaccept-20 -j ACCEPT +-A logaccept-21 -m limit --limit 1/second -j LOG +-A logaccept-21 -j ACCEPT +-A logaccept-3 -m limit --limit 1/second -j LOG +-A logaccept-3 -j ACCEPT +-A logaccept-4 -m limit --limit 1/second -j LOG +-A logaccept-4 -j ACCEPT +-A logaccept-5 -m limit --limit 1/second -j LOG +-A logaccept-5 -j ACCEPT +-A logaccept-6 -m limit --limit 1/second -j LOG +-A logaccept-6 -j ACCEPT +-A logaccept-7 -m limit --limit 1/second -j LOG +-A logaccept-7 -j ACCEPT +-A logaccept-8 -m limit --limit 1/second -j LOG +-A logaccept-8 -j ACCEPT -A logaccept-9 -m limit --limit 1/second -j LOG -A logaccept-9 -j ACCEPT -A logaccept-final-0 -m limit --limit 1/second -j LOG @@ -42598,8 +38599,6 @@ COMMIT -A logdrop-456 -j DROP -A logdrop-457 -m limit --limit 1/second -j LOG -A logdrop-457 -j DROP --A logdrop-458 -m limit --limit 1/second -j LOG --A logdrop-458 -j DROP -A logdrop-46 -m limit --limit 1/second -j LOG -A logdrop-46 -j DROP -A logdrop-47 -m limit --limit 1/second -j LOG @@ -42719,17 +38718,6 @@ COMMIT -A logdrop-99 -m limit --limit 1/second -j LOG -A logdrop-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG --A logpass-16 -m limit --limit 1/second -j LOG --A logpass-30 -m limit --limit 1/second -j LOG --A logpass-37 -m limit --limit 1/second -j LOG --A logpass-50 -m limit --limit 1/second -j LOG --A logpass-9 -m limit --limit 1/second -j LOG --A logreject-0 -m limit --limit 1/second -j LOG --A logreject-0 -j REJECT --A logtarpit-0 -m limit --limit 1/second -j LOG --A logtarpit-0 -j tarpit --A tarpit -p tcp -j TARPIT --A tarpit -j DROP COMMIT *mangle :INPUT ACCEPT [0:0] @@ -42744,7 +38732,6 @@ COMMIT *raw :OUTPUT ACCEPT [0:0] :PREROUTING ACCEPT [0:0] --A OUTPUT -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack @@ -42931,11 +38918,7 @@ COMMIT -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -p tcp --dport 80 -j CT --notrack --A OUTPUT -p esp -j CT --notrack --A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack -A OUTPUT -j CT --notrack --A PREROUTING -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -43294,9 +39277,6 @@ COMMIT -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack -A PREROUTING -i eth0 -j CT --notrack -A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack diff --git a/test/output/filter-limit/ipset-awall-masquerade b/test/output/filter-limit/ipset-awall-masquerade new file mode 100644 index 0000000..b3a47fd --- /dev/null +++ b/test/output/filter-limit/ipset-awall-masquerade @@ -0,0 +1,2 @@ +# ipset awall-masquerade +hash:net family inet diff --git a/test/output/rules-save b/test/output/filter-limit/rules-save index 4f6d821..d4f2a44 100644 --- a/test/output/rules-save +++ b/test/output/filter-limit/rules-save @@ -3,134 +3,6 @@ :FORWARD DROP [0:0] :INPUT DROP [0:0] :OUTPUT DROP [0:0] -:address-0 - [0:0] -:address-1 - [0:0] -:address-10 - [0:0] -:address-100 - [0:0] -:address-101 - [0:0] -:address-102 - [0:0] -:address-103 - [0:0] -:address-104 - [0:0] -:address-105 - [0:0] -:address-106 - [0:0] -:address-107 - [0:0] -:address-108 - [0:0] -:address-109 - [0:0] -:address-11 - [0:0] -:address-110 - [0:0] -:address-111 - [0:0] -:address-112 - [0:0] -:address-113 - [0:0] -:address-114 - [0:0] -:address-115 - [0:0] -:address-116 - [0:0] -:address-117 - [0:0] -:address-118 - [0:0] -:address-119 - [0:0] -:address-12 - [0:0] -:address-120 - [0:0] -:address-121 - [0:0] -:address-122 - [0:0] -:address-123 - [0:0] -:address-124 - [0:0] -:address-125 - [0:0] -:address-126 - [0:0] -:address-127 - [0:0] -:address-13 - [0:0] -:address-14 - [0:0] -:address-15 - [0:0] -:address-16 - [0:0] -:address-17 - [0:0] -:address-18 - [0:0] -:address-19 - [0:0] -:address-2 - [0:0] -:address-20 - [0:0] -:address-21 - [0:0] -:address-22 - [0:0] -:address-23 - [0:0] -:address-24 - [0:0] -:address-25 - [0:0] -:address-26 - [0:0] -:address-27 - [0:0] -:address-28 - [0:0] -:address-29 - [0:0] -:address-3 - [0:0] -:address-30 - [0:0] -:address-31 - [0:0] -:address-32 - [0:0] -:address-33 - [0:0] -:address-34 - [0:0] -:address-35 - [0:0] -:address-36 - [0:0] -:address-37 - [0:0] -:address-38 - [0:0] -:address-39 - [0:0] -:address-4 - [0:0] -:address-40 - [0:0] -:address-41 - [0:0] -:address-42 - [0:0] -:address-43 - [0:0] -:address-44 - [0:0] -:address-45 - [0:0] -:address-46 - [0:0] -:address-47 - [0:0] -:address-48 - [0:0] -:address-49 - [0:0] -:address-5 - [0:0] -:address-50 - [0:0] -:address-51 - [0:0] -:address-52 - [0:0] -:address-53 - [0:0] -:address-54 - [0:0] -:address-55 - [0:0] -:address-56 - [0:0] -:address-57 - [0:0] -:address-58 - [0:0] -:address-59 - [0:0] -:address-6 - [0:0] -:address-60 - [0:0] -:address-61 - [0:0] -:address-62 - [0:0] -:address-63 - [0:0] -:address-64 - [0:0] -:address-65 - [0:0] -:address-66 - [0:0] -:address-67 - [0:0] -:address-68 - [0:0] -:address-69 - [0:0] -:address-7 - [0:0] -:address-70 - [0:0] -:address-71 - [0:0] -:address-72 - [0:0] -:address-73 - [0:0] -:address-74 - [0:0] -:address-75 - [0:0] -:address-76 - [0:0] -:address-77 - [0:0] -:address-78 - [0:0] -:address-79 - [0:0] -:address-8 - [0:0] -:address-80 - [0:0] -:address-81 - [0:0] -:address-82 - [0:0] -:address-83 - [0:0] -:address-84 - [0:0] -:address-85 - [0:0] -:address-86 - [0:0] -:address-87 - [0:0] -:address-88 - [0:0] -:address-89 - [0:0] -:address-9 - [0:0] -:address-90 - [0:0] -:address-91 - [0:0] -:address-92 - [0:0] -:address-93 - [0:0] -:address-94 - [0:0] -:address-95 - [0:0] -:address-96 - [0:0] -:address-97 - [0:0] -:address-98 - [0:0] -:address-99 - [0:0] :icmp-routing - [0:0] :limit-0 - [0:0] :limit-1 - [0:0] @@ -1483,75 +1355,12 @@ :logaccept-2 - [0:0] :logaccept-20 - [0:0] :logaccept-21 - [0:0] -:logaccept-22 - [0:0] -:logaccept-23 - [0:0] -:logaccept-24 - [0:0] -:logaccept-25 - [0:0] -:logaccept-26 - [0:0] -:logaccept-27 - [0:0] -:logaccept-28 - [0:0] -:logaccept-29 - [0:0] :logaccept-3 - [0:0] -:logaccept-30 - [0:0] -:logaccept-31 - [0:0] -:logaccept-32 - [0:0] -:logaccept-33 - [0:0] -:logaccept-34 - [0:0] -:logaccept-35 - [0:0] -:logaccept-36 - [0:0] -:logaccept-37 - [0:0] -:logaccept-38 - [0:0] -:logaccept-39 - [0:0] :logaccept-4 - [0:0] -:logaccept-40 - [0:0] -:logaccept-41 - [0:0] -:logaccept-42 - [0:0] -:logaccept-43 - [0:0] -:logaccept-44 - [0:0] -:logaccept-45 - [0:0] -:logaccept-46 - [0:0] -:logaccept-47 - [0:0] -:logaccept-48 - [0:0] -:logaccept-49 - [0:0] :logaccept-5 - [0:0] -:logaccept-50 - [0:0] -:logaccept-51 - [0:0] -:logaccept-52 - [0:0] -:logaccept-53 - [0:0] -:logaccept-54 - [0:0] -:logaccept-55 - [0:0] -:logaccept-56 - [0:0] -:logaccept-57 - [0:0] -:logaccept-58 - [0:0] -:logaccept-59 - [0:0] :logaccept-6 - [0:0] -:logaccept-60 - [0:0] -:logaccept-61 - [0:0] -:logaccept-62 - [0:0] -:logaccept-63 - [0:0] -:logaccept-64 - [0:0] -:logaccept-65 - [0:0] -:logaccept-66 - [0:0] -:logaccept-67 - [0:0] -:logaccept-68 - [0:0] -:logaccept-69 - [0:0] :logaccept-7 - [0:0] -:logaccept-70 - [0:0] -:logaccept-71 - [0:0] -:logaccept-72 - [0:0] -:logaccept-73 - [0:0] -:logaccept-74 - [0:0] -:logaccept-75 - [0:0] -:logaccept-76 - [0:0] -:logaccept-77 - [0:0] -:logaccept-78 - [0:0] -:logaccept-79 - [0:0] :logaccept-8 - [0:0] -:logaccept-80 - [0:0] -:logaccept-81 - [0:0] -:logaccept-82 - [0:0] -:logaccept-83 - [0:0] -:logaccept-84 - [0:0] :logaccept-9 - [0:0] :logaccept-final-0 - [0:0] :logaccept-final-1 - [0:0] @@ -2014,7 +1823,6 @@ :logdrop-455 - [0:0] :logdrop-456 - [0:0] :logdrop-457 - [0:0] -:logdrop-458 - [0:0] :logdrop-46 - [0:0] :logdrop-47 - [0:0] :logdrop-48 - [0:0] @@ -2075,59 +1883,6 @@ :logdrop-98 - [0:0] :logdrop-99 - [0:0] :logpass-0 - [0:0] -:logpass-1 - [0:0] -:logpass-10 - [0:0] -:logpass-11 - [0:0] -:logpass-12 - [0:0] -:logpass-13 - [0:0] -:logpass-14 - [0:0] -:logpass-15 - [0:0] -:logpass-16 - [0:0] -:logpass-17 - [0:0] -:logpass-18 - [0:0] -:logpass-19 - [0:0] -:logpass-2 - [0:0] -:logpass-20 - [0:0] -:logpass-21 - [0:0] -:logpass-22 - [0:0] -:logpass-23 - [0:0] -:logpass-24 - [0:0] -:logpass-25 - [0:0] -:logpass-26 - [0:0] -:logpass-27 - [0:0] -:logpass-28 - [0:0] -:logpass-29 - [0:0] -:logpass-3 - [0:0] -:logpass-30 - [0:0] -:logpass-31 - [0:0] -:logpass-32 - [0:0] -:logpass-33 - [0:0] -:logpass-34 - [0:0] -:logpass-35 - [0:0] -:logpass-36 - [0:0] -:logpass-37 - [0:0] -:logpass-38 - [0:0] -:logpass-39 - [0:0] -:logpass-4 - [0:0] -:logpass-40 - [0:0] -:logpass-41 - [0:0] -:logpass-42 - [0:0] -:logpass-43 - [0:0] -:logpass-44 - [0:0] -:logpass-45 - [0:0] -:logpass-46 - [0:0] -:logpass-47 - [0:0] -:logpass-48 - [0:0] -:logpass-49 - [0:0] -:logpass-5 - [0:0] -:logpass-50 - [0:0] -:logpass-6 - [0:0] -:logpass-7 - [0:0] -:logpass-8 - [0:0] -:logpass-9 - [0:0] -:logreject-0 - [0:0] -:logtarpit-0 - [0:0] -:tarpit - [0:0] -A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set -A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set -A FORWARD -j limit-1073 @@ -2489,452 +2244,6 @@ -A FORWARD -j limit-717 -A FORWARD -j limit-716 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD --A FORWARD -j logaccept-0 --A FORWARD -j logpass-0 --A FORWARD -d 172.16.0.0/16 -j ACCEPT --A FORWARD -d 172.16.0.0/16 --A FORWARD -d 172.16.0.0/16 -j logaccept-1 --A FORWARD -d 172.16.0.0/16 -j logpass-1 --A FORWARD -d 172.16.0.0/16 -j ACCEPT --A FORWARD -d 172.16.2.0/16 -j ACCEPT --A FORWARD -d 172.16.0.0/16 --A FORWARD -d 172.16.2.0/16 --A FORWARD -d 172.16.0.0/16 -j logaccept-2 --A FORWARD -d 172.16.2.0/16 -j logaccept-2 --A FORWARD -d 172.16.0.0/16 -j logpass-2 --A FORWARD -d 172.16.2.0/16 -j logpass-2 --A FORWARD -s 10.0.0.1 -j ACCEPT --A FORWARD -s 10.0.0.1 --A FORWARD -s 10.0.0.1 -j logaccept-3 --A FORWARD -s 10.0.0.1 -j logpass-3 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 --A FORWARD -s 10.0.0.1 -j ACCEPT --A FORWARD -s 10.0.0.2 -j ACCEPT --A FORWARD -s 10.0.0.1 --A FORWARD -s 10.0.0.2 --A FORWARD -s 10.0.0.1 -j logaccept-6 --A FORWARD -s 10.0.0.2 -j logaccept-6 --A FORWARD -s 10.0.0.1 -j logpass-6 --A FORWARD -s 10.0.0.2 -j logpass-6 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 --A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 --A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 --A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 --A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 --A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 --A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 --A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -o eth1 -d 10.0.0.0/12 --A FORWARD -o eth1 -d 10.0.0.0/12 -j logaccept-9 --A FORWARD -o eth1 -d 10.0.0.0/12 -j logpass-9 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-0 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-1 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-2 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-3 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-4 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-5 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-6 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-7 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-8 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-9 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-10 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-11 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-12 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-13 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-14 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-15 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 --A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-16 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-17 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-18 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-19 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-20 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-21 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-22 --A FORWARD -o eth1 -d 10.0.0.0/12 -j address-23 --A FORWARD -i eth0 -j ACCEPT --A FORWARD -i eth0 --A FORWARD -i eth0 -j logaccept-18 --A FORWARD -i eth0 -j logpass-16 --A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -d 172.16.0.0/16 --A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-19 --A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-17 --A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth0 -d 172.16.0.0/16 --A FORWARD -i eth0 -d 172.16.2.0/16 --A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-20 --A FORWARD -i eth0 -d 172.16.2.0/16 -j logaccept-20 --A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-18 --A FORWARD -i eth0 -d 172.16.2.0/16 -j logpass-18 --A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 --A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-21 --A FORWARD -i eth0 -s 10.0.0.1 -j logpass-19 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 --A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.2 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 --A FORWARD -i eth0 -s 10.0.0.2 --A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-24 --A FORWARD -i eth0 -s 10.0.0.2 -j logaccept-24 --A FORWARD -i eth0 -s 10.0.0.1 -j logpass-22 --A FORWARD -i eth0 -s 10.0.0.2 -j logpass-22 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 --A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 --A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j logaccept-27 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-24 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-25 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-26 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-27 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-28 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-29 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-30 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-31 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-30 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-32 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-33 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-34 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-35 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-36 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-37 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-38 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-39 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-33 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-33 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-27 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-27 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-40 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-41 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-42 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-43 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-44 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-45 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-46 --A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-47 --A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 --A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-36 --A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-30 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-48 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-49 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-50 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-51 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-52 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-53 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-54 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-55 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-56 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-57 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-58 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-59 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-60 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-61 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-62 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-63 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-64 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-65 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-66 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-67 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-68 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-69 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-70 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-71 --A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 --A FORWARD -i eth2 -s 10.1.0.0/12 --A FORWARD -i eth3 -s 10.1.0.0/12 --A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-45 --A FORWARD -i eth2 -s 10.1.0.0/12 -j logaccept-45 --A FORWARD -i eth3 -s 10.1.0.0/12 -j logaccept-45 --A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-37 --A FORWARD -i eth2 -s 10.1.0.0/12 -j logpass-37 --A FORWARD -i eth3 -s 10.1.0.0/12 -j logpass-37 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-72 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-72 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-72 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-73 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-73 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-73 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-74 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-74 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-74 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-75 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-75 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-75 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-76 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-76 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-76 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-77 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-77 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-77 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-78 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-78 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-78 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-79 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-79 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-79 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-80 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-80 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-80 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-81 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-81 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-81 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-82 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-82 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-82 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-83 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-83 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-83 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-84 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-84 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-84 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-85 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-85 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-85 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-86 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-86 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-86 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-87 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-87 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-87 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-88 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-88 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-88 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-89 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-89 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-89 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-90 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-90 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-90 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-91 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-91 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-91 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-92 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-92 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-92 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-93 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-93 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-93 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-94 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-94 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-94 --A FORWARD -i eth1 -s 10.0.0.0/12 -j address-95 --A FORWARD -i eth2 -s 10.1.0.0/12 -j address-95 --A FORWARD -i eth3 -s 10.1.0.0/12 -j address-95 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-44 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 --A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 --A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logdrop-0 --A FORWARD --A FORWARD -j logreject-0 --A FORWARD -j logtarpit-0 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-0 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-1 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-2 @@ -3486,23 +2795,17 @@ -A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set -A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set -A FORWARD -j ACCEPT --A FORWARD -j logdrop-457 +-A FORWARD -j logdrop-456 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-84 --A FORWARD -j logdrop-458 --A FORWARD -j logpass-50 +-A FORWARD -j logaccept-21 +-A FORWARD -j logdrop-457 +-A FORWARD -j logpass-0 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A FORWARD -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A FORWARD -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A FORWARD -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A FORWARD -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT --A FORWARD -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT -A FORWARD -i eth0 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT @@ -3916,300 +3219,6 @@ -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT --A INPUT --A INPUT -j logaccept-0 --A INPUT -j logpass-0 --A INPUT -d 172.16.0.0/16 -j ACCEPT --A INPUT -d 172.16.0.0/16 --A INPUT -d 172.16.0.0/16 -j logaccept-1 --A INPUT -d 172.16.0.0/16 -j logpass-1 --A INPUT -d 172.16.0.0/16 -j ACCEPT --A INPUT -d 172.16.2.0/16 -j ACCEPT --A INPUT -d 172.16.0.0/16 --A INPUT -d 172.16.2.0/16 --A INPUT -d 172.16.0.0/16 -j logaccept-2 --A INPUT -d 172.16.2.0/16 -j logaccept-2 --A INPUT -d 172.16.0.0/16 -j logpass-2 --A INPUT -d 172.16.2.0/16 -j logpass-2 --A INPUT -s 10.0.0.1 -j ACCEPT --A INPUT -s 10.0.0.1 --A INPUT -s 10.0.0.1 -j logaccept-3 --A INPUT -s 10.0.0.1 -j logpass-3 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 --A INPUT -s 10.0.0.1 -j ACCEPT --A INPUT -s 10.0.0.2 -j ACCEPT --A INPUT -s 10.0.0.1 --A INPUT -s 10.0.0.2 --A INPUT -s 10.0.0.1 -j logaccept-6 --A INPUT -s 10.0.0.2 -j logaccept-6 --A INPUT -s 10.0.0.1 -j logpass-6 --A INPUT -s 10.0.0.2 -j logpass-6 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 --A INPUT -s 10.0.0.2 -d 172.16.2.0/16 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 --A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 --A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 --A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 --A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 --A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 --A INPUT -i eth0 -j ACCEPT --A INPUT -i eth0 --A INPUT -i eth0 -j logaccept-18 --A INPUT -i eth0 -j logpass-16 --A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -d 172.16.0.0/16 --A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-19 --A INPUT -i eth0 -d 172.16.0.0/16 -j logpass-17 --A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth0 -d 172.16.0.0/16 --A INPUT -i eth0 -d 172.16.2.0/16 --A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-20 --A INPUT -i eth0 -d 172.16.2.0/16 -j logaccept-20 --A INPUT -i eth0 -d 172.16.0.0/16 -j logpass-18 --A INPUT -i eth0 -d 172.16.2.0/16 -j logpass-18 --A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 --A INPUT -i eth0 -s 10.0.0.1 -j logaccept-21 --A INPUT -i eth0 -s 10.0.0.1 -j logpass-19 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21 --A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.2 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 --A INPUT -i eth0 -s 10.0.0.2 --A INPUT -i eth0 -s 10.0.0.1 -j logaccept-24 --A INPUT -i eth0 -s 10.0.0.2 -j logaccept-24 --A INPUT -i eth0 -s 10.0.0.1 -j logpass-22 --A INPUT -i eth0 -s 10.0.0.2 -j logpass-22 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24 --A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24 --A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24 --A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 --A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-36 --A INPUT -i eth1 -s 10.0.0.0/12 -j logpass-30 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-48 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-49 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-50 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-51 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-52 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-53 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-54 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-55 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-56 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-57 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-58 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-59 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-60 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-61 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-62 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-63 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-64 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-65 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-66 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-67 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-68 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-69 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-70 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-71 --A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT --A INPUT -i eth2 -s 10.1.0.0/12 -j ACCEPT --A INPUT -i eth3 -s 10.1.0.0/12 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 --A INPUT -i eth2 -s 10.1.0.0/12 --A INPUT -i eth3 -s 10.1.0.0/12 --A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-45 --A INPUT -i eth2 -s 10.1.0.0/12 -j logaccept-45 --A INPUT -i eth3 -s 10.1.0.0/12 -j logaccept-45 --A INPUT -i eth1 -s 10.0.0.0/12 -j logpass-37 --A INPUT -i eth2 -s 10.1.0.0/12 -j logpass-37 --A INPUT -i eth3 -s 10.1.0.0/12 -j logpass-37 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39 --A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-72 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-72 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-72 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-73 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-73 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-73 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-74 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-74 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-74 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-75 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-75 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-75 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-76 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-76 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-76 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-77 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-77 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-77 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-78 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-78 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-78 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-79 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-79 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-79 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-80 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-80 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-80 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-81 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-81 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-81 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-82 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-82 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-82 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-83 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-83 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-83 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-84 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-84 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-84 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-85 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-85 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-85 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-86 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-86 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-86 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-87 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-87 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-87 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-88 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-88 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-88 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-89 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-89 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-89 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-90 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-90 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-90 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-91 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-91 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-91 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-92 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-92 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-92 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-93 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-93 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-93 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-94 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-94 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-94 --A INPUT -i eth1 -s 10.0.0.0/12 -j address-95 --A INPUT -i eth2 -s 10.1.0.0/12 -j address-95 --A INPUT -i eth3 -s 10.1.0.0/12 -j address-95 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logdrop-0 --A INPUT --A INPUT -j logreject-0 --A INPUT -j logtarpit-0 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-0 -A INPUT -j ACCEPT -A INPUT -j ACCEPT @@ -4414,11 +3423,11 @@ -A INPUT -i eth0 -j limit-1090 -A INPUT -i eth0 -j limit-1091 -A INPUT -i eth0 -j limit-1092 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-362 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-361 -A INPUT -i eth0 -j limit-1094 -A INPUT -i eth0 -j limit-1095 -A INPUT -i eth0 -j limit-1096 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-366 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-365 -A INPUT -i eth0 -j limit-1098 -A INPUT -i eth0 -j limit-1099 -A INPUT -i eth0 -j limit-1100 @@ -4426,11 +3435,11 @@ -A INPUT -i eth0 -j limit-1102 -A INPUT -i eth0 -j limit-1103 -A INPUT -i eth0 -j limit-1104 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-374 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-373 -A INPUT -i eth0 -j limit-1106 -A INPUT -i eth0 -j limit-1107 -A INPUT -i eth0 -j limit-1108 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-378 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-377 -A INPUT -i eth0 -j limit-1110 -A INPUT -i eth0 -j limit-1111 -A INPUT -i eth0 -j limit-1112 @@ -4438,11 +3447,11 @@ -A INPUT -i eth0 -j limit-1114 -A INPUT -i eth0 -j limit-1115 -A INPUT -i eth0 -j limit-1116 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-386 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-385 -A INPUT -i eth0 -j limit-1118 -A INPUT -i eth0 -j limit-1119 -A INPUT -i eth0 -j limit-1120 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-390 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-389 -A INPUT -i eth0 -j limit-1122 -A INPUT -i eth0 -j limit-1123 -A INPUT -i eth0 -j limit-1124 @@ -4450,11 +3459,11 @@ -A INPUT -i eth0 -j limit-1126 -A INPUT -i eth0 -j limit-1127 -A INPUT -i eth0 -j limit-1128 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-398 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-397 -A INPUT -i eth0 -j limit-1130 -A INPUT -i eth0 -j limit-1131 -A INPUT -i eth0 -j limit-1132 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-402 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-401 -A INPUT -i eth0 -j limit-1134 -A INPUT -i eth0 -j limit-1135 -A INPUT -i eth0 -j limit-1136 @@ -4576,11 +3585,11 @@ -A INPUT -i eth0 -j limit-1252 -A INPUT -i eth0 -j limit-1253 -A INPUT -i eth0 -j limit-1254 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-416 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-415 -A INPUT -i eth0 -j limit-1256 -A INPUT -i eth0 -j limit-1257 -A INPUT -i eth0 -j limit-1258 --A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-420 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-419 -A INPUT -i eth0 -j limit-1260 -A INPUT -i eth0 -j limit-1261 -A INPUT -i eth0 -j limit-1262 @@ -4588,11 +3597,11 @@ -A INPUT -i eth0 -j limit-1264 -A INPUT -i eth0 -j limit-1265 -A INPUT -i eth0 -j limit-1266 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-428 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-427 -A INPUT -i eth0 -j limit-1268 -A INPUT -i eth0 -j limit-1269 -A INPUT -i eth0 -j limit-1270 --A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-432 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-431 -A INPUT -i eth0 -j limit-1272 -A INPUT -i eth0 -j limit-1273 -A INPUT -i eth0 -j limit-1274 @@ -4600,11 +3609,11 @@ -A INPUT -i eth0 -j limit-1276 -A INPUT -i eth0 -j limit-1277 -A INPUT -i eth0 -j limit-1278 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-440 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-439 -A INPUT -i eth0 -j limit-1280 -A INPUT -i eth0 -j limit-1281 -A INPUT -i eth0 -j limit-1282 --A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-444 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-443 -A INPUT -i eth0 -j limit-1284 -A INPUT -i eth0 -j limit-1285 -A INPUT -i eth0 -j limit-1286 @@ -4612,11 +3621,11 @@ -A INPUT -i eth0 -j limit-1288 -A INPUT -i eth0 -j limit-1289 -A INPUT -i eth0 -j limit-1290 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-452 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-451 -A INPUT -i eth0 -j limit-1292 -A INPUT -i eth0 -j limit-1293 -A INPUT -i eth0 -j limit-1294 --A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-456 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-455 -A INPUT -i eth0 -j limit-1296 -A INPUT -i eth0 -j limit-1297 -A INPUT -i eth0 -j limit-1298 @@ -4760,26 +3769,17 @@ -A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A INPUT -j ACCEPT --A INPUT -j logdrop-457 +-A INPUT -j logdrop-456 -A INPUT -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-84 --A INPUT -j logdrop-458 --A INPUT -j logpass-50 +-A INPUT -j logaccept-21 +-A INPUT -j logdrop-457 +-A INPUT -j logpass-0 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -p tcp --sport 80 -j ACCEPT --A INPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A INPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A INPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A INPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A INPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT --A INPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT --A INPUT -p esp -j ACCEPT --A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmp -j icmp-routing @@ -5145,116 +4145,6 @@ -A OUTPUT -j limit-716 -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT --A OUTPUT -j logaccept-0 --A OUTPUT -j logpass-0 --A OUTPUT -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -d 172.16.0.0/16 --A OUTPUT -d 172.16.0.0/16 -j logaccept-1 --A OUTPUT -d 172.16.0.0/16 -j logpass-1 --A OUTPUT -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -d 172.16.2.0/16 -j ACCEPT --A OUTPUT -d 172.16.0.0/16 --A OUTPUT -d 172.16.2.0/16 --A OUTPUT -d 172.16.0.0/16 -j logaccept-2 --A OUTPUT -d 172.16.2.0/16 -j logaccept-2 --A OUTPUT -d 172.16.0.0/16 -j logpass-2 --A OUTPUT -d 172.16.2.0/16 -j logpass-2 --A OUTPUT -s 10.0.0.1 -j ACCEPT --A OUTPUT -s 10.0.0.1 --A OUTPUT -s 10.0.0.1 -j logaccept-3 --A OUTPUT -s 10.0.0.1 -j logpass-3 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 --A OUTPUT -s 10.0.0.1 -j ACCEPT --A OUTPUT -s 10.0.0.2 -j ACCEPT --A OUTPUT -s 10.0.0.1 --A OUTPUT -s 10.0.0.2 --A OUTPUT -s 10.0.0.1 -j logaccept-6 --A OUTPUT -s 10.0.0.2 -j logaccept-6 --A OUTPUT -s 10.0.0.1 -j logpass-6 --A OUTPUT -s 10.0.0.2 -j logpass-6 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 --A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 --A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 --A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 --A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 --A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 --A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j logaccept-9 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j logpass-9 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-0 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-1 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-2 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-3 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-4 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-5 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-6 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-7 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-8 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-9 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-10 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-11 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-12 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-13 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-14 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-15 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13 --A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-16 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-17 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-18 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-19 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-20 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-21 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-22 --A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-23 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-0 --A OUTPUT --A OUTPUT -j logreject-0 --A OUTPUT -j logtarpit-0 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-0 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-2 @@ -5632,11 +4522,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-374 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-375 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-376 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-378 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-379 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-380 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-138 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-137 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-382 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-383 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-384 @@ -5644,11 +4534,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-386 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-387 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-388 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-390 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-391 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-392 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-150 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-394 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-395 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-396 @@ -5656,11 +4546,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-398 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-399 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-400 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-158 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-157 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-402 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-403 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-404 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-162 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-406 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-407 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-408 @@ -5668,11 +4558,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-410 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-411 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-412 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-170 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-414 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-415 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-416 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-174 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-173 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-418 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-419 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-420 @@ -5794,11 +4684,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-536 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-537 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-538 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-540 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-541 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-542 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-192 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-544 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-545 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-546 @@ -5806,11 +4696,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-548 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-549 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-550 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-199 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-552 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-553 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-554 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-204 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-556 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-557 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-558 @@ -5818,11 +4708,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-560 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-561 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-562 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-212 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-211 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-564 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-565 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-566 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-216 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-215 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-568 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-569 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-570 @@ -5830,11 +4720,11 @@ -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-572 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-573 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-574 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-224 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-576 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-577 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-578 --A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-228 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-227 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-580 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-581 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-582 @@ -6350,289 +5240,28 @@ -A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-457 +-A OUTPUT -j logdrop-456 -A OUTPUT -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-84 --A OUTPUT -j logdrop-458 --A OUTPUT -j logpass-50 +-A OUTPUT -j logaccept-21 +-A OUTPUT -j logdrop-457 +-A OUTPUT -j logpass-0 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -p tcp --dport 80 -j ACCEPT --A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT --A OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT --A OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT --A OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT --A OUTPUT -p esp -j ACCEPT --A OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT -A OUTPUT -p icmp -j icmp-routing --A address-0 -d 172.16.0.0/16 -j ACCEPT --A address-1 -d 172.16.0.0/16 --A address-10 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-13 --A address-100 -d 172.16.0.0/16 -j ACCEPT --A address-100 -d 172.16.2.0/16 -j ACCEPT --A address-101 -d 172.16.0.0/16 --A address-101 -d 172.16.2.0/16 --A address-102 -d 172.16.0.0/16 -j logaccept-56 --A address-102 -d 172.16.2.0/16 -j logaccept-56 --A address-103 -d 172.16.0.0/16 -j logpass-45 --A address-103 -d 172.16.2.0/16 -j logpass-45 --A address-104 -s 10.0.0.1 -j ACCEPT --A address-105 -s 10.0.0.1 --A address-106 -s 10.0.0.1 -j logaccept-57 --A address-107 -s 10.0.0.1 -m limit --limit 1/second -j LOG --A address-108 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-109 -s 10.0.0.1 -d 172.16.0.0/16 --A address-11 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-110 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-58 --A address-111 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-112 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-112 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-113 -s 10.0.0.1 -d 172.16.0.0/16 --A address-113 -s 10.0.0.1 -d 172.16.2.0/16 --A address-114 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-59 --A address-114 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-59 --A address-115 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-46 --A address-115 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-46 --A address-116 -s 10.0.0.1 -j ACCEPT --A address-116 -s 10.0.0.2 -j ACCEPT --A address-117 -s 10.0.0.1 --A address-117 -s 10.0.0.2 --A address-118 -s 10.0.0.1 -j logaccept-60 --A address-118 -s 10.0.0.2 -j logaccept-60 --A address-119 -s 10.0.0.1 -j logpass-47 --A address-119 -s 10.0.0.2 -j logpass-47 --A address-12 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-12 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-120 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-120 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-121 -s 10.0.0.1 -d 172.16.0.0/16 --A address-121 -s 10.0.0.2 -d 172.16.0.0/16 --A address-122 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-61 --A address-122 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-61 --A address-123 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-48 --A address-123 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-48 --A address-124 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-124 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-124 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-124 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-125 -s 10.0.0.1 -d 172.16.0.0/16 --A address-125 -s 10.0.0.1 -d 172.16.2.0/16 --A address-125 -s 10.0.0.2 -d 172.16.0.0/16 --A address-125 -s 10.0.0.2 -d 172.16.2.0/16 --A address-126 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-62 --A address-126 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-62 --A address-126 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-62 --A address-126 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-62 --A address-127 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-49 --A address-127 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-49 --A address-127 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-49 --A address-127 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-49 --A address-13 -s 10.0.0.1 -d 172.16.0.0/16 --A address-13 -s 10.0.0.1 -d 172.16.2.0/16 --A address-14 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-14 --A address-14 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-14 --A address-15 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-12 --A address-15 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-12 --A address-16 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-16 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-17 -s 10.0.0.1 -d 172.16.0.0/16 --A address-17 -s 10.0.0.2 -d 172.16.0.0/16 --A address-18 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-16 --A address-18 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-16 --A address-19 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-14 --A address-19 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-14 --A address-2 -d 172.16.0.0/16 -j logaccept-10 --A address-20 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-20 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-20 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-20 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-21 -s 10.0.0.1 -d 172.16.0.0/16 --A address-21 -s 10.0.0.1 -d 172.16.2.0/16 --A address-21 -s 10.0.0.2 -d 172.16.0.0/16 --A address-21 -s 10.0.0.2 -d 172.16.2.0/16 --A address-22 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-17 --A address-22 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-17 --A address-22 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-17 --A address-22 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-17 --A address-23 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-15 --A address-23 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-15 --A address-23 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-15 --A address-23 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-15 --A address-24 -d 172.16.0.0/16 -j ACCEPT --A address-25 -d 172.16.0.0/16 --A address-26 -d 172.16.0.0/16 -j logaccept-28 --A address-27 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-28 -d 172.16.0.0/16 -j ACCEPT --A address-28 -d 172.16.2.0/16 -j ACCEPT --A address-29 -d 172.16.0.0/16 --A address-29 -d 172.16.2.0/16 --A address-3 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-30 -d 172.16.0.0/16 -j logaccept-29 --A address-30 -d 172.16.2.0/16 -j logaccept-29 --A address-31 -d 172.16.0.0/16 -j logpass-25 --A address-31 -d 172.16.2.0/16 -j logpass-25 --A address-32 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-33 -s 10.0.0.1 -d 172.16.0.0/16 --A address-34 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-31 --A address-35 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-36 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-36 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-37 -s 10.0.0.1 -d 172.16.0.0/16 --A address-37 -s 10.0.0.1 -d 172.16.2.0/16 --A address-38 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-32 --A address-38 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-32 --A address-39 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-26 --A address-39 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-26 --A address-4 -d 172.16.0.0/16 -j ACCEPT --A address-4 -d 172.16.2.0/16 -j ACCEPT --A address-40 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-40 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-41 -s 10.0.0.1 -d 172.16.0.0/16 --A address-41 -s 10.0.0.2 -d 172.16.0.0/16 --A address-42 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-34 --A address-42 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-34 --A address-43 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-28 --A address-43 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-28 --A address-44 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-44 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-44 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-44 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-45 -s 10.0.0.1 -d 172.16.0.0/16 --A address-45 -s 10.0.0.1 -d 172.16.2.0/16 --A address-45 -s 10.0.0.2 -d 172.16.0.0/16 --A address-45 -s 10.0.0.2 -d 172.16.2.0/16 --A address-46 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-35 --A address-46 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-35 --A address-46 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-35 --A address-46 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-35 --A address-47 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-29 --A address-47 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-29 --A address-47 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-29 --A address-47 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-29 --A address-48 -s 10.0.0.1 -j ACCEPT --A address-49 -s 10.0.0.1 --A address-5 -d 172.16.0.0/16 --A address-5 -d 172.16.2.0/16 --A address-50 -s 10.0.0.1 -j logaccept-39 --A address-51 -s 10.0.0.1 -m limit --limit 1/second -j LOG --A address-52 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-53 -s 10.0.0.1 -d 172.16.0.0/16 --A address-54 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-40 --A address-55 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-56 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-56 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-57 -s 10.0.0.1 -d 172.16.0.0/16 --A address-57 -s 10.0.0.1 -d 172.16.2.0/16 --A address-58 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-41 --A address-58 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-41 --A address-59 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-33 --A address-59 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-33 --A address-6 -d 172.16.0.0/16 -j logaccept-11 --A address-6 -d 172.16.2.0/16 -j logaccept-11 --A address-60 -s 10.0.0.1 -j ACCEPT --A address-60 -s 10.0.0.2 -j ACCEPT --A address-61 -s 10.0.0.1 --A address-61 -s 10.0.0.2 --A address-62 -s 10.0.0.1 -j logaccept-42 --A address-62 -s 10.0.0.2 -j logaccept-42 --A address-63 -s 10.0.0.1 -j logpass-34 --A address-63 -s 10.0.0.2 -j logpass-34 --A address-64 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-64 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-65 -s 10.0.0.1 -d 172.16.0.0/16 --A address-65 -s 10.0.0.2 -d 172.16.0.0/16 --A address-66 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-43 --A address-66 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-43 --A address-67 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-35 --A address-67 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-35 --A address-68 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-68 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-68 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-68 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-69 -s 10.0.0.1 -d 172.16.0.0/16 --A address-69 -s 10.0.0.1 -d 172.16.2.0/16 --A address-69 -s 10.0.0.2 -d 172.16.0.0/16 --A address-69 -s 10.0.0.2 -d 172.16.2.0/16 --A address-7 -d 172.16.0.0/16 -j logpass-10 --A address-7 -d 172.16.2.0/16 -j logpass-10 --A address-70 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-44 --A address-70 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-44 --A address-70 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-44 --A address-70 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-44 --A address-71 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-36 --A address-71 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-36 --A address-71 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-36 --A address-71 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-36 --A address-72 -s 10.0.0.1 -j ACCEPT --A address-73 -s 10.0.0.1 --A address-74 -s 10.0.0.1 -j logaccept-48 --A address-75 -s 10.0.0.1 -m limit --limit 1/second -j LOG --A address-76 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-77 -s 10.0.0.1 -d 172.16.0.0/16 --A address-78 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-49 --A address-79 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG --A address-8 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-80 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-80 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-81 -s 10.0.0.1 -d 172.16.0.0/16 --A address-81 -s 10.0.0.1 -d 172.16.2.0/16 --A address-82 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-50 --A address-82 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-50 --A address-83 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-40 --A address-83 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-40 --A address-84 -s 10.0.0.1 -j ACCEPT --A address-84 -s 10.0.0.2 -j ACCEPT --A address-85 -s 10.0.0.1 --A address-85 -s 10.0.0.2 --A address-86 -s 10.0.0.1 -j logaccept-51 --A address-86 -s 10.0.0.2 -j logaccept-51 --A address-87 -s 10.0.0.1 -j logpass-41 --A address-87 -s 10.0.0.2 -j logpass-41 --A address-88 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-88 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-89 -s 10.0.0.1 -d 172.16.0.0/16 --A address-89 -s 10.0.0.2 -d 172.16.0.0/16 --A address-9 -s 10.0.0.1 -d 172.16.0.0/16 --A address-90 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-52 --A address-90 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-52 --A address-91 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-42 --A address-91 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-42 --A address-92 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT --A address-92 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT --A address-92 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT --A address-92 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT --A address-93 -s 10.0.0.1 -d 172.16.0.0/16 --A address-93 -s 10.0.0.1 -d 172.16.2.0/16 --A address-93 -s 10.0.0.2 -d 172.16.0.0/16 --A address-93 -s 10.0.0.2 -d 172.16.2.0/16 --A address-94 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-53 --A address-94 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-53 --A address-94 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-53 --A address-94 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-53 --A address-95 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-43 --A address-95 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-43 --A address-95 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-43 --A address-95 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-43 --A address-96 -d 172.16.0.0/16 -j ACCEPT --A address-97 -d 172.16.0.0/16 --A address-98 -d 172.16.0.0/16 -j logaccept-55 --A address-99 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG -A icmp-routing -p icmp --icmp-type 3 -j ACCEPT -A icmp-routing -p icmp --icmp-type 11 -j ACCEPT -A icmp-routing -p icmp --icmp-type 12 -j ACCEPT --A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1 +-A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-0 -A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-2 +-A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1 -A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --set --A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 +-A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 -A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-100 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-100 -j ACCEPT @@ -6790,132 +5419,132 @@ -A limit-1072 -j DROP -A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1073 -j RETURN -A limit-1073 -j DROP --A limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-343 +-A limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-342 -A limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-344 +-A limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-343 -A limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --set --A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-345 +-A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-344 -A limit-1076 -m limit --limit 1/second -j LOG -A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-346 +-A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-345 -A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-347 +-A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-346 -A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-348 +-A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-347 -A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --set -A limit-108 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-108 -j ACCEPT --A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-349 +-A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-348 -A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-350 +-A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-349 -A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set --A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-351 +-A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-350 -A limit-1082 -m limit --limit 1/second -j LOG -A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-352 +-A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-351 -A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-353 +-A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-352 -A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-354 +-A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-353 -A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --set --A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-355 +-A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-354 -A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-356 +-A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-355 -A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-357 +-A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-356 -A limit-1088 -m limit --limit 1/second -j LOG -A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-358 +-A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-357 -A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-109 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-359 +-A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-358 -A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-360 +-A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-359 -A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-361 +-A limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-360 -A limit-1092 -j ACCEPT --A limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-363 +-A limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-362 -A limit-1094 -m limit --limit 1/second -j LOG -A limit-1094 -j ACCEPT --A limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-364 +-A limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-363 -A limit-1095 -m limit --limit 1/second -j LOG --A limit-1096 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-365 +-A limit-1096 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-364 -A limit-1096 -j ACCEPT --A limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-367 +-A limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-366 -A limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-368 +-A limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-367 -A limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 +-A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 -A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set -A limit-110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-110 -m limit --limit 1/second -j LOG -A limit-110 -j ACCEPT --A limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-369 +-A limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-368 -A limit-1100 -m limit --limit 1/second -j LOG -A limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-370 +-A limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-369 -A limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-371 +-A limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-370 -A limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-372 +-A limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-371 -A limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1104 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-373 +-A limit-1104 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-372 -A limit-1104 -j ACCEPT --A limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-375 +-A limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-374 -A limit-1106 -m limit --limit 1/second -j LOG -A limit-1106 -j ACCEPT --A limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-376 +-A limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-375 -A limit-1107 -m limit --limit 1/second -j LOG --A limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-377 +-A limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-376 -A limit-1108 -j ACCEPT -A limit-111 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-111 -m limit --limit 1/second -j LOG --A limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-379 +-A limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-378 -A limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-380 +-A limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-379 -A limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-381 +-A limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-380 -A limit-1112 -m limit --limit 1/second -j LOG -A limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-382 +-A limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-381 -A limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-383 +-A limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-382 -A limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-384 +-A limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-383 -A limit-1115 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1116 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-385 +-A limit-1116 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-384 -A limit-1116 -j ACCEPT --A limit-1118 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-387 +-A limit-1118 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-386 -A limit-1118 -m limit --limit 1/second -j LOG -A limit-1118 -j ACCEPT --A limit-1119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-388 +-A limit-1119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-387 -A limit-1119 -m limit --limit 1/second -j LOG -A limit-112 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-112 -j ACCEPT --A limit-1120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-389 +-A limit-1120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-388 -A limit-1120 -j ACCEPT --A limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-391 +-A limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-390 -A limit-1122 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-392 +-A limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-391 -A limit-1123 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-393 +-A limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-392 -A limit-1124 -m limit --limit 1/second -j LOG -A limit-1124 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-394 +-A limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-393 -A limit-1125 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-395 +-A limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-394 -A limit-1126 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-396 +-A limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-395 -A limit-1127 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1128 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-397 +-A limit-1128 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-396 -A limit-1128 -j ACCEPT -A limit-113 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1130 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-399 +-A limit-1130 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-398 -A limit-1130 -m limit --limit 1/second -j LOG -A limit-1130 -j ACCEPT --A limit-1131 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-400 +-A limit-1131 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-399 -A limit-1131 -m limit --limit 1/second -j LOG --A limit-1132 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-401 +-A limit-1132 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-400 -A limit-1132 -j ACCEPT -A limit-1134 -m recent --name limit-1134 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1134 -m recent --name limit-1134 --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -7057,7 +5686,7 @@ -A limit-1198 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1199 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1199 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 +-A limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 -A limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -7145,116 +5774,116 @@ -A limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1240 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1240 -j ACCEPT --A limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-403 +-A limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-402 -A limit-1242 -m recent --name limit-1242 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-404 +-A limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-403 -A limit-1243 -m recent --name limit-1243 --rsource --mask 255.255.255.255 --set --A limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-405 +-A limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-404 -A limit-1244 -m limit --limit 1/second -j LOG -A limit-1244 -m recent --name limit-1244 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-406 +-A limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-405 -A limit-1245 -m recent --name limit-1245 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-407 +-A limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-406 -A limit-1246 -m recent --name limit-1246 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-408 +-A limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-407 -A limit-1247 -m recent --name limit-1247 --rsource --mask 255.255.255.255 --set --A limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-409 +-A limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-408 -A limit-1248 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-410 +-A limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-409 -A limit-1249 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-411 +-A limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-410 -A limit-1250 -m limit --limit 1/second -j LOG -A limit-1250 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-412 +-A limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-411 -A limit-1251 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-413 +-A limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-412 -A limit-1252 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-414 +-A limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-413 -A limit-1253 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-1254 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-415 +-A limit-1254 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-414 -A limit-1254 -j ACCEPT --A limit-1256 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-417 +-A limit-1256 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-416 -A limit-1256 -m limit --limit 1/second -j LOG -A limit-1256 -j ACCEPT --A limit-1257 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-418 +-A limit-1257 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-417 -A limit-1257 -m limit --limit 1/second -j LOG --A limit-1258 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-419 +-A limit-1258 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-418 -A limit-1258 -j ACCEPT -A limit-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-126 -j ACCEPT --A limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-421 +-A limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-420 -A limit-1260 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-422 +-A limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-421 -A limit-1261 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-423 +-A limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-422 -A limit-1262 -m limit --limit 1/second -j LOG -A limit-1262 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-424 +-A limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-423 -A limit-1263 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-425 +-A limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-424 -A limit-1264 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-426 +-A limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-425 -A limit-1265 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-1266 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-427 +-A limit-1266 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-426 -A limit-1266 -j ACCEPT --A limit-1268 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-429 +-A limit-1268 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-428 -A limit-1268 -m limit --limit 1/second -j LOG -A limit-1268 -j ACCEPT --A limit-1269 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-430 +-A limit-1269 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-429 -A limit-1269 -m limit --limit 1/second -j LOG -A limit-127 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1270 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-431 +-A limit-1270 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-430 -A limit-1270 -j ACCEPT --A limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-433 +-A limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-432 -A limit-1272 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-434 +-A limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-433 -A limit-1273 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-435 +-A limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-434 -A limit-1274 -m limit --limit 1/second -j LOG -A limit-1274 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-436 +-A limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-435 -A limit-1275 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-437 +-A limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-436 -A limit-1276 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-438 +-A limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-437 -A limit-1277 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-1278 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-439 +-A limit-1278 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-438 -A limit-1278 -j ACCEPT -A limit-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-128 -m limit --limit 1/second -j LOG -A limit-128 -j ACCEPT --A limit-1280 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-441 +-A limit-1280 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-440 -A limit-1280 -m limit --limit 1/second -j LOG -A limit-1280 -j ACCEPT --A limit-1281 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-442 +-A limit-1281 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-441 -A limit-1281 -m limit --limit 1/second -j LOG --A limit-1282 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-443 +-A limit-1282 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-442 -A limit-1282 -j ACCEPT --A limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-445 +-A limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-444 -A limit-1284 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-446 +-A limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-445 -A limit-1285 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-447 +-A limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-446 -A limit-1286 -m limit --limit 1/second -j LOG -A limit-1286 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-448 +-A limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-447 -A limit-1287 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-449 +-A limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-448 -A limit-1288 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-450 +-A limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-449 -A limit-1289 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-129 -m limit --limit 1/second -j LOG --A limit-1290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-451 +-A limit-1290 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-450 -A limit-1290 -j ACCEPT --A limit-1292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-453 +-A limit-1292 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-452 -A limit-1292 -m limit --limit 1/second -j LOG -A limit-1292 -j ACCEPT --A limit-1293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-454 +-A limit-1293 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-453 -A limit-1293 -m limit --limit 1/second -j LOG --A limit-1294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-455 +-A limit-1294 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-454 -A limit-1294 -j ACCEPT -A limit-1296 -m recent --name limit-1296 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1296 -m recent --name limit-1296 --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -7265,7 +5894,7 @@ -A limit-1298 -m recent --name limit-1298 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1299 -m recent --name limit-1299 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1299 -m recent --name limit-1299 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 +-A limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 -A limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-130 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-130 -j ACCEPT @@ -7472,7 +6101,7 @@ -A limit-1397 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1398 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1398 -j ACCEPT --A limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 +-A limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 -A limit-14 -m limit --limit 1/second -j LOG -A limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP @@ -7491,7 +6120,7 @@ -A limit-1405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1405 -j RETURN -A limit-1405 -m limit --limit 1/second -j LOG -A limit-1405 -j DROP --A limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1406 -j logaccept-77 +-A limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1406 -j logaccept-14 -A limit-1406 -m limit --limit 1/second -j LOG -A limit-1406 -j DROP -A limit-1407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1407 -j ACCEPT @@ -7505,7 +6134,7 @@ -A limit-1409 -j DROP -A limit-141 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-141 -m limit --limit 1/second -j LOG --A limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1410 -j logaccept-78 +-A limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1410 -j logaccept-15 -A limit-1410 -m limit --limit 1/second -j LOG -A limit-1410 -j DROP -A limit-1411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1411 -j ACCEPT @@ -7515,7 +6144,7 @@ -A limit-1412 -j DROP -A limit-1413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1413 -j RETURN -A limit-1413 -j DROP --A limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1414 -j logaccept-79 +-A limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1414 -j logaccept-16 -A limit-1414 -j DROP -A limit-1415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1415 -j ACCEPT -A limit-1415 -j DROP @@ -7523,7 +6152,7 @@ -A limit-1416 -j DROP -A limit-1417 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1417 -j RETURN -A limit-1417 -j DROP --A limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1418 -j logaccept-80 +-A limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1418 -j logaccept-17 -A limit-1418 -j DROP -A limit-1419 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1419 -j ACCEPT -A limit-1419 -j DROP @@ -7535,7 +6164,7 @@ -A limit-1421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1421 -j RETURN -A limit-1421 -m limit --limit 1/second -j LOG -A limit-1421 -j DROP --A limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1422 -j logaccept-81 +-A limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1422 -j logaccept-18 -A limit-1422 -m limit --limit 1/second -j LOG -A limit-1422 -j DROP -A limit-1423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1423 -j ACCEPT @@ -7545,7 +6174,7 @@ -A limit-1424 -j DROP -A limit-1425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1425 -j RETURN -A limit-1425 -j DROP --A limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1426 -j logaccept-82 +-A limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1426 -j logaccept-19 -A limit-1426 -j DROP -A limit-1427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1427 -j ACCEPT -A limit-1427 -j DROP @@ -7554,7 +6183,7 @@ -A limit-1429 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1429 -j RETURN -A limit-1429 -j DROP -A limit-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1430 -j logaccept-83 +-A limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1430 -j logaccept-20 -A limit-1430 -j DROP -A limit-1431 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1431 -j ACCEPT -A limit-1431 -j DROP @@ -7571,7 +6200,7 @@ -A limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 +-A limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 -A limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-150 -j ACCEPT @@ -7593,7 +6222,7 @@ -A limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 +-A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 -A limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT @@ -7610,130 +6239,130 @@ -A limit-166 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-166 -j ACCEPT -A limit-167 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-61 +-A limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-60 -A limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-62 +-A limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-61 -A limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --set --A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-18 +-A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 -A limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-63 +-A limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-62 -A limit-170 -m limit --limit 1/second -j LOG -A limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-64 +-A limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-63 -A limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-65 +-A limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-64 -A limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-66 +-A limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-65 -A limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --set --A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-67 +-A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-66 -A limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-68 +-A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-67 -A limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-69 +-A limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-68 -A limit-176 -m limit --limit 1/second -j LOG -A limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-70 +-A limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-69 -A limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-71 +-A limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-70 -A limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-72 +-A limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-71 -A limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-19 +-A limit-18 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-18 -A limit-18 -j ACCEPT --A limit-180 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-73 +-A limit-180 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-72 -A limit-180 -j ACCEPT --A limit-181 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 --A limit-182 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-75 +-A limit-181 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-73 +-A limit-182 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 -A limit-182 -m limit --limit 1/second -j LOG -A limit-182 -j ACCEPT --A limit-183 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-76 +-A limit-183 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-75 -A limit-183 -m limit --limit 1/second -j LOG --A limit-184 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-77 +-A limit-184 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-76 -A limit-184 -j ACCEPT --A limit-185 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-78 --A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-79 +-A limit-185 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-77 +-A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-78 -A limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-80 +-A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-79 -A limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-81 +-A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-80 -A limit-188 -m limit --limit 1/second -j LOG -A limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-82 +-A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-81 -A limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-19 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-20 --A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-83 +-A limit-19 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-19 +-A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-82 -A limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-84 +-A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-83 -A limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-192 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-85 +-A limit-192 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-84 -A limit-192 -j ACCEPT --A limit-193 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 --A limit-194 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-87 +-A limit-193 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-85 +-A limit-194 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 -A limit-194 -m limit --limit 1/second -j LOG -A limit-194 -j ACCEPT --A limit-195 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-88 +-A limit-195 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-87 -A limit-195 -m limit --limit 1/second -j LOG --A limit-196 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-89 +-A limit-196 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-88 -A limit-196 -j ACCEPT --A limit-197 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-90 --A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-91 +-A limit-197 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-89 +-A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-90 -A limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-92 +-A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-91 -A limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 +-A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-2 -A limit-2 -m limit --limit 1/second -j LOG -A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-21 +-A limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-20 -A limit-20 -m limit --limit 1/second -j LOG -A limit-20 -j ACCEPT --A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-93 +-A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-92 -A limit-200 -m limit --limit 1/second -j LOG -A limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-94 +-A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-93 -A limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-95 +-A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-94 -A limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-96 +-A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-95 -A limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-97 +-A limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-96 -A limit-204 -j ACCEPT --A limit-205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 --A limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-99 +-A limit-205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-97 +-A limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 -A limit-206 -m limit --limit 1/second -j LOG -A limit-206 -j ACCEPT --A limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-100 +-A limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-99 -A limit-207 -m limit --limit 1/second -j LOG --A limit-208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-101 +-A limit-208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-100 -A limit-208 -j ACCEPT --A limit-209 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-102 --A limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-22 +-A limit-209 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-101 +-A limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-21 -A limit-21 -m limit --limit 1/second -j LOG --A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-103 +-A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-102 -A limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-104 +-A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-103 -A limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-105 +-A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-104 -A limit-212 -m limit --limit 1/second -j LOG -A limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-106 +-A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-105 -A limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-107 +-A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-106 -A limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-108 +-A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-107 -A limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-109 +-A limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-108 -A limit-216 -j ACCEPT --A limit-217 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 --A limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-111 +-A limit-217 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-109 +-A limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 -A limit-218 -m limit --limit 1/second -j LOG -A limit-218 -j ACCEPT --A limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-112 +-A limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-111 -A limit-219 -m limit --limit 1/second -j LOG --A limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-23 +-A limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-22 -A limit-22 -j ACCEPT --A limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-113 +-A limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-112 -A limit-220 -j ACCEPT --A limit-221 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-114 +-A limit-221 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-113 -A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP @@ -7751,7 +6380,7 @@ -A limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-24 +-A limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-23 -A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-230 -m limit --limit 1/second -j LOG -A limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -7772,7 +6401,7 @@ -A limit-238 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-238 -j ACCEPT -A limit-239 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 +-A limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-24 -A limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT @@ -7795,7 +6424,7 @@ -A limit-248 -j ACCEPT -A limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-249 -m limit --limit 1/second -j LOG --A limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 +-A limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 -A limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-250 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-250 -j ACCEPT @@ -7816,7 +6445,7 @@ -A limit-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-258 -j ACCEPT -A limit-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 +-A limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 -A limit-26 -m limit --limit 1/second -j LOG -A limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-260 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP @@ -7840,7 +6469,7 @@ -A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 +-A limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 -A limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-270 -j ACCEPT @@ -7862,7 +6491,7 @@ -A limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 +-A limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 -A limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -7884,7 +6513,7 @@ -A limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-288 -j ACCEPT -A limit-289 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-30 +-A limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 -A limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-290 -m limit --limit 1/second -j LOG @@ -7907,9 +6536,9 @@ -A limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 +-A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 -A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-30 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 +-A limit-30 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-30 -A limit-30 -j ACCEPT -A limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-300 -j ACCEPT @@ -7931,7 +6560,7 @@ -A limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-31 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 +-A limit-31 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 -A limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP @@ -7951,7 +6580,7 @@ -A limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 +-A limit-32 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 -A limit-32 -m limit --limit 1/second -j LOG -A limit-32 -j ACCEPT -A limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP @@ -7974,7 +6603,7 @@ -A limit-328 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-328 -j ACCEPT -A limit-329 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 +-A limit-33 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 -A limit-33 -m limit --limit 1/second -j LOG -A limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-330 -j ACCEPT -A limit-330 -m limit --limit 1/second -j LOG @@ -7982,7 +6611,7 @@ -A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-331 -j RETURN -A limit-331 -m limit --limit 1/second -j LOG -A limit-331 -j DROP --A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-63 +-A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-0 -A limit-332 -m limit --limit 1/second -j LOG -A limit-332 -j DROP -A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-333 -j ACCEPT @@ -7994,7 +6623,7 @@ -A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-335 -j RETURN -A limit-335 -m limit --limit 1/second -j LOG -A limit-335 -j DROP --A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-64 +-A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-1 -A limit-336 -m limit --limit 1/second -j LOG -A limit-336 -j DROP -A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-337 -j ACCEPT @@ -8004,9 +6633,9 @@ -A limit-338 -j DROP -A limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-339 -j RETURN -A limit-339 -j DROP --A limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 +-A limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 -A limit-34 -j ACCEPT --A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-65 +-A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-2 -A limit-340 -j DROP -A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-341 -j ACCEPT -A limit-341 -j DROP @@ -8014,7 +6643,7 @@ -A limit-342 -j DROP -A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-343 -j RETURN -A limit-343 -j DROP --A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-66 +-A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-3 -A limit-344 -j DROP -A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-345 -j ACCEPT -A limit-345 -j DROP @@ -8024,18 +6653,18 @@ -A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-347 -j RETURN -A limit-347 -m limit --limit 1/second -j LOG -A limit-347 -j DROP --A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-67 +-A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-4 -A limit-348 -m limit --limit 1/second -j LOG -A limit-348 -j DROP -A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-349 -j ACCEPT -A limit-349 -m limit --limit 1/second -j LOG -A limit-349 -j DROP --A limit-35 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-36 +-A limit-35 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 -A limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-350 -j ACCEPT -A limit-350 -j DROP -A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-351 -j RETURN -A limit-351 -j DROP --A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-68 +-A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-5 -A limit-352 -j DROP -A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-353 -j ACCEPT -A limit-353 -j DROP @@ -8043,144 +6672,144 @@ -A limit-354 -j DROP -A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-355 -j RETURN -A limit-355 -j DROP --A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-69 +-A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-6 -A limit-356 -j DROP -A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-357 -j ACCEPT -A limit-357 -j DROP --A limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 +-A limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-114 -A limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 +-A limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 -A limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --set --A limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-37 +-A limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-36 -A limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 +-A limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 -A limit-360 -m limit --limit 1/second -j LOG -A limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 +-A limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 -A limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 +-A limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 -A limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-120 +-A limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 -A limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --set --A limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-121 +-A limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-120 -A limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-122 +-A limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-121 -A limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --set --A limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-123 +-A limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-122 -A limit-366 -m limit --limit 1/second -j LOG -A limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-124 +-A limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-123 -A limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-125 +-A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-124 -A limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-126 +-A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-125 -A limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --set --A limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-38 +-A limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-37 -A limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-127 +-A limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-126 -A limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-128 +-A limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-127 -A limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-129 +-A limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-128 -A limit-372 -m limit --limit 1/second -j LOG -A limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 +-A limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-129 -A limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 +-A limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 -A limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 -A limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 +-A limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-132 -A limit-376 -j ACCEPT --A limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 +-A limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 -A limit-378 -m limit --limit 1/second -j LOG -A limit-378 -j ACCEPT --A limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-136 +-A limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 -A limit-379 -m limit --limit 1/second -j LOG --A limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-39 +-A limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-38 -A limit-38 -m limit --limit 1/second -j LOG -A limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-137 +-A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-136 -A limit-380 -j ACCEPT --A limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 +-A limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-138 -A limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 +-A limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 -A limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 +-A limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 -A limit-384 -m limit --limit 1/second -j LOG -A limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 +-A limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 -A limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 +-A limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 -A limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-144 +-A limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 -A limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 +-A limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-144 -A limit-388 -j ACCEPT --A limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-40 +-A limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-39 -A limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 +-A limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 -A limit-390 -m limit --limit 1/second -j LOG -A limit-390 -j ACCEPT --A limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 +-A limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 -A limit-391 -m limit --limit 1/second -j LOG --A limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 +-A limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 -A limit-392 -j ACCEPT --A limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 +-A limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-150 -A limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 +-A limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 -A limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 +-A limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 -A limit-396 -m limit --limit 1/second -j LOG -A limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 +-A limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 -A limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 +-A limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 -A limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-156 +-A limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 -A limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 +-A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 -A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-41 +-A limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-40 -A limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-400 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-157 +-A limit-400 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-156 -A limit-400 -j ACCEPT --A limit-402 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-159 +-A limit-402 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-158 -A limit-402 -m limit --limit 1/second -j LOG -A limit-402 -j ACCEPT --A limit-403 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 +-A limit-403 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-159 -A limit-403 -m limit --limit 1/second -j LOG --A limit-404 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 +-A limit-404 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 -A limit-404 -j ACCEPT --A limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-163 +-A limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-162 -A limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-164 +-A limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-163 -A limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-165 +-A limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-164 -A limit-408 -m limit --limit 1/second -j LOG -A limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-166 +-A limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-165 -A limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-42 +-A limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-41 -A limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-167 +-A limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-166 -A limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-168 +-A limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-167 -A limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-412 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 +-A limit-412 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-168 -A limit-412 -j ACCEPT --A limit-414 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-171 +-A limit-414 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-170 -A limit-414 -m limit --limit 1/second -j LOG -A limit-414 -j ACCEPT --A limit-415 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-172 +-A limit-415 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-171 -A limit-415 -m limit --limit 1/second -j LOG --A limit-416 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-173 +-A limit-416 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-172 -A limit-416 -j ACCEPT -A limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --set --A limit-42 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 +-A limit-42 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-42 -A limit-42 -j ACCEPT -A limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-420 -m limit --limit 1/second -j LOG @@ -8204,7 +6833,7 @@ -A limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-43 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 +-A limit-43 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 -A limit-430 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-430 -j ACCEPT -A limit-432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP @@ -8223,7 +6852,7 @@ -A limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-44 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 +-A limit-44 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 -A limit-44 -m limit --limit 1/second -j LOG -A limit-44 -j ACCEPT -A limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP @@ -8243,7 +6872,7 @@ -A limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-45 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 +-A limit-45 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 -A limit-45 -m limit --limit 1/second -j LOG -A limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-450 -m limit --limit 1/second -j LOG @@ -8263,7 +6892,7 @@ -A limit-457 -m limit --limit 1/second -j LOG -A limit-458 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-458 -j ACCEPT --A limit-46 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 +-A limit-46 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 -A limit-46 -j ACCEPT -A limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT @@ -8285,7 +6914,7 @@ -A limit-468 -j ACCEPT -A limit-469 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-469 -m limit --limit 1/second -j LOG --A limit-47 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-48 +-A limit-47 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 -A limit-470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-470 -j ACCEPT -A limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP @@ -8305,7 +6934,7 @@ -A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 +-A limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-48 -A limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-480 -m limit --limit 1/second -j LOG @@ -8325,7 +6954,7 @@ -A limit-487 -m limit --limit 1/second -j LOG -A limit-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-488 -j ACCEPT --A limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 -A limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT @@ -8347,9 +6976,9 @@ -A limit-498 -j ACCEPT -A limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-499 -m limit --limit 1/second -j LOG --A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 +-A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 -A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set --A limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 +-A limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 -A limit-50 -m limit --limit 1/second -j LOG -A limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP @@ -8369,7 +6998,7 @@ -A limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-508 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-508 -j ACCEPT --A limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 +-A limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 -A limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-510 -m limit --limit 1/second -j LOG @@ -8391,7 +7020,7 @@ -A limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 +-A limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 -A limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-520 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-520 -j ACCEPT @@ -8402,118 +7031,118 @@ -A limit-523 -m limit --limit 1/second -j LOG -A limit-524 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-524 -j ACCEPT --A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 +-A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-174 -A limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 +-A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 -A limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --set --A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 +-A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 -A limit-528 -m limit --limit 1/second -j LOG -A limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 +-A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 -A limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-54 +-A limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 -A limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 +-A limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 -A limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 +-A limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 -A limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --set --A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 +-A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 -A limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 +-A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 -A limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 +-A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 -A limit-534 -m limit --limit 1/second -j LOG -A limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-184 +-A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 -A limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-185 +-A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-184 -A limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT --A limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-186 +-A limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-185 -A limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 +-A limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-186 -A limit-538 -j ACCEPT --A limit-54 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-54 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-54 -A limit-54 -j ACCEPT --A limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 +-A limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 -A limit-540 -m limit --limit 1/second -j LOG -A limit-540 -j ACCEPT --A limit-541 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 +-A limit-541 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 -A limit-541 -m limit --limit 1/second -j LOG --A limit-542 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 +-A limit-542 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 -A limit-542 -j ACCEPT --A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-193 +-A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-192 -A limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-194 +-A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-193 -A limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-195 +-A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-194 -A limit-546 -m limit --limit 1/second -j LOG -A limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-196 +-A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-195 -A limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-197 +-A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-196 -A limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT --A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-198 +-A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-197 -A limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-55 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 --A limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-199 +-A limit-55 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-198 -A limit-550 -j ACCEPT --A limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 +-A limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 -A limit-552 -m limit --limit 1/second -j LOG -A limit-552 -j ACCEPT --A limit-553 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 +-A limit-553 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 -A limit-553 -m limit --limit 1/second -j LOG --A limit-554 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 +-A limit-554 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 -A limit-554 -j ACCEPT --A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-205 +-A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-204 -A limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-206 +-A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-205 -A limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-207 +-A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-206 -A limit-558 -m limit --limit 1/second -j LOG -A limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 +-A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-207 -A limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-56 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 +-A limit-56 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 -A limit-56 -m limit --limit 1/second -j LOG -A limit-56 -j ACCEPT --A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 +-A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 -A limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-210 +-A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 -A limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-211 +-A limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-210 -A limit-562 -j ACCEPT --A limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-213 +-A limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-212 -A limit-564 -m limit --limit 1/second -j LOG -A limit-564 -j ACCEPT --A limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-214 +-A limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-213 -A limit-565 -m limit --limit 1/second -j LOG --A limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-215 +-A limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-214 -A limit-566 -j ACCEPT --A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-217 +-A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-216 -A limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-218 +-A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-217 -A limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-57 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 +-A limit-57 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 -A limit-57 -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-219 +-A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-218 -A limit-570 -m limit --limit 1/second -j LOG -A limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-220 +-A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-219 -A limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-221 +-A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-220 -A limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-222 +-A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-221 -A limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 +-A limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-222 -A limit-574 -j ACCEPT --A limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-225 +-A limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-224 -A limit-576 -m limit --limit 1/second -j LOG -A limit-576 -j ACCEPT --A limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-226 +-A limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-225 -A limit-577 -m limit --limit 1/second -j LOG --A limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-227 +-A limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-226 -A limit-578 -j ACCEPT --A limit-58 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 +-A limit-58 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 -A limit-58 -j ACCEPT -A limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -8537,7 +7166,7 @@ -A limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-59 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 +-A limit-59 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 -A limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP @@ -8555,7 +7184,7 @@ -A limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 +-A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 -A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -8748,7 +7377,7 @@ -A limit-689 -j DROP -A limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-690 -j logaccept-70 +-A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-690 -j logaccept-7 -A limit-690 -m limit --limit 1/second -j LOG -A limit-690 -j DROP -A limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-691 -j ACCEPT @@ -8760,7 +7389,7 @@ -A limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-693 -j RETURN -A limit-693 -m limit --limit 1/second -j LOG -A limit-693 -j DROP --A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-694 -j logaccept-71 +-A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-694 -j logaccept-8 -A limit-694 -m limit --limit 1/second -j LOG -A limit-694 -j DROP -A limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-695 -j ACCEPT @@ -8770,11 +7399,11 @@ -A limit-696 -j DROP -A limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-697 -j RETURN -A limit-697 -j DROP --A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-698 -j logaccept-72 +-A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-698 -j logaccept-9 -A limit-698 -j DROP -A limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-699 -j ACCEPT -A limit-699 -j DROP --A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 +-A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 -A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set -A limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT @@ -8782,7 +7411,7 @@ -A limit-700 -j DROP -A limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-701 -j RETURN -A limit-701 -j DROP --A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-702 -j logaccept-73 +-A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-702 -j logaccept-10 -A limit-702 -j DROP -A limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-703 -j ACCEPT -A limit-703 -j DROP @@ -8792,7 +7421,7 @@ -A limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-705 -j RETURN -A limit-705 -m limit --limit 1/second -j LOG -A limit-705 -j DROP --A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-706 -j logaccept-74 +-A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-706 -j logaccept-11 -A limit-706 -m limit --limit 1/second -j LOG -A limit-706 -j DROP -A limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-707 -j ACCEPT @@ -8804,7 +7433,7 @@ -A limit-709 -j DROP -A limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-710 -j logaccept-75 +-A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-710 -j logaccept-12 -A limit-710 -j DROP -A limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-711 -j ACCEPT -A limit-711 -j DROP @@ -8812,121 +7441,121 @@ -A limit-712 -j DROP -A limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-713 -j RETURN -A limit-713 -j DROP --A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-714 -j logaccept-76 +-A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-714 -j logaccept-13 -A limit-714 -j DROP -A limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-715 -j ACCEPT -A limit-715 -j DROP --A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 +-A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-228 -A limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --set --A limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-230 +-A limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 -A limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --set --A limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-231 +-A limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-230 -A limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --set --A limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-232 +-A limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-231 -A limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-72 -j ACCEPT --A limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-233 +-A limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-232 -A limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --set --A limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-234 +-A limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-233 -A limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --set --A limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-235 +-A limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-234 -A limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --set --A limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-236 +-A limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-235 -A limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --set --A limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-237 +-A limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-236 -A limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --set --A limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-238 +-A limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-237 -A limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-239 +-A limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-238 -A limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --set --A limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-240 +-A limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-239 -A limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --set --A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-241 +-A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-240 -A limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-242 +-A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-241 -A limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-73 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-243 +-A limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-242 -A limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-244 +-A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-243 -A limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-245 +-A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-244 -A limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-245 -A limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-247 --A limit-735 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 --A limit-736 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-249 --A limit-737 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-735 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-247 +-A limit-736 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 +-A limit-737 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-249 -A limit-737 -m limit --limit 1/second -j LOG --A limit-738 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 --A limit-739 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-252 +-A limit-738 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-739 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 -A limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-74 -m limit --limit 1/second -j LOG -A limit-74 -j ACCEPT --A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-253 +-A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-252 -A limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-254 +-A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-253 -A limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-255 +-A limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-254 -A limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-256 +-A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-255 -A limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-257 +-A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-256 -A limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-258 +-A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-257 -A limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 --A limit-747 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 --A limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-261 --A limit-749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-262 +-A limit-746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-258 +-A limit-747 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 +-A limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 +-A limit-749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-261 -A limit-749 -m limit --limit 1/second -j LOG -A limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-75 -m limit --limit 1/second -j LOG --A limit-750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-263 --A limit-751 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-264 --A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 +-A limit-750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-262 +-A limit-751 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-263 +-A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-264 -A limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 +-A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 -A limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 +-A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 -A limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 +-A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 -A limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 +-A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 -A limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 -A limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-758 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 --A limit-759 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A limit-758 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-759 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 -A limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-76 -j ACCEPT --A limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 --A limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 -A limit-761 -m limit --limit 1/second -j LOG --A limit-762 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 --A limit-763 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-276 --A limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-277 +-A limit-762 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-763 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 +-A limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-276 -A limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-278 +-A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-277 -A limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-279 +-A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-278 -A limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-280 +-A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-279 -A limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-281 +-A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-280 -A limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-282 +-A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-281 -A limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-77 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-283 --A limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284 --A limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-285 --A limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-286 +-A limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-282 +-A limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-283 +-A limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284 +-A limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-285 -A limit-773 -m limit --limit 1/second -j LOG --A limit-774 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-287 --A limit-775 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-288 +-A limit-774 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-286 +-A limit-775 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-287 -A limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --set -A limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP @@ -8974,7 +7603,7 @@ -A limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 +-A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 -A limit-8 -m limit --limit 1/second -j LOG -A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP @@ -9129,106 +7758,106 @@ -A limit-881 -m limit --limit 1/second -j LOG -A limit-882 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-883 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 +-A limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-288 -A limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --set --A limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 +-A limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 -A limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --set --A limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 +-A limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 -A limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --set --A limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 +-A limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 -A limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 +-A limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 -A limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --set --A limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 +-A limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 -A limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --set -A limit-89 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 +-A limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 -A limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 +-A limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 -A limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 +-A limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 -A limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 +-A limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 -A limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 +-A limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 -A limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 -A limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --set --A limit-896 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 --A limit-897 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 --A limit-898 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 --A limit-899 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-896 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-897 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 +-A limit-898 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 +-A limit-899 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 -A limit-899 -m limit --limit 1/second -j LOG --A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 +-A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 -A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-900 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 --A limit-901 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-306 --A limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-307 +-A limit-900 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-901 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 +-A limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-306 -A limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-308 +-A limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-307 -A limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-309 +-A limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-308 -A limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 +-A limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-309 -A limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG --A limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 +-A limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 -A limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 -A limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --set --A limit-908 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-313 --A limit-909 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-314 +-A limit-908 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-909 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-313 -A limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-910 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-315 --A limit-911 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-910 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-314 +-A limit-911 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-315 -A limit-911 -m limit --limit 1/second -j LOG --A limit-912 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-317 --A limit-913 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-318 --A limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-319 +-A limit-912 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-913 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-317 +-A limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-318 -A limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-320 +-A limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-319 -A limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-321 +-A limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-320 -A limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-322 +-A limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-321 -A limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-323 +-A limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-322 -A limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --set --A limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-323 -A limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-92 -m limit --limit 1/second -j LOG -A limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT --A limit-920 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 --A limit-921 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 --A limit-922 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 --A limit-923 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-920 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-921 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 +-A limit-922 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 +-A limit-923 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 -A limit-923 -m limit --limit 1/second -j LOG --A limit-924 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 --A limit-925 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-330 --A limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 +-A limit-924 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-925 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 +-A limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-330 -A limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 +-A limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 -A limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 +-A limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 -A limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 +-A limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 -A limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG --A limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 +-A limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 -A limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 -A limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --set --A limit-932 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-337 --A limit-933 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-338 --A limit-934 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-339 --A limit-935 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-932 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-933 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-337 +-A limit-934 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-338 +-A limit-935 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-339 -A limit-935 -m limit --limit 1/second -j LOG --A limit-936 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 --A limit-937 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-342 +-A limit-936 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-937 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 -A limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --set -A limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP @@ -9375,144 +8004,18 @@ -A logaccept-20 -j ACCEPT -A logaccept-21 -m limit --limit 1/second -j LOG -A logaccept-21 -j ACCEPT --A logaccept-22 -m limit --limit 1/second -j LOG --A logaccept-22 -j ACCEPT --A logaccept-23 -m limit --limit 1/second -j LOG --A logaccept-23 -j ACCEPT --A logaccept-24 -m limit --limit 1/second -j LOG --A logaccept-24 -j ACCEPT --A logaccept-25 -m limit --limit 1/second -j LOG --A logaccept-25 -j ACCEPT --A logaccept-26 -m limit --limit 1/second -j LOG --A logaccept-26 -j ACCEPT --A logaccept-27 -m limit --limit 1/second -j LOG --A logaccept-27 -j ACCEPT --A logaccept-28 -m limit --limit 1/second -j LOG --A logaccept-28 -j ACCEPT --A logaccept-29 -m limit --limit 1/second -j LOG --A logaccept-29 -j ACCEPT -A logaccept-3 -m limit --limit 1/second -j LOG -A logaccept-3 -j ACCEPT --A logaccept-30 -m limit --limit 1/second -j LOG --A logaccept-30 -j ACCEPT --A logaccept-31 -m limit --limit 1/second -j LOG --A logaccept-31 -j ACCEPT --A logaccept-32 -m limit --limit 1/second -j LOG --A logaccept-32 -j ACCEPT --A logaccept-33 -m limit --limit 1/second -j LOG --A logaccept-33 -j ACCEPT --A logaccept-34 -m limit --limit 1/second -j LOG --A logaccept-34 -j ACCEPT --A logaccept-35 -m limit --limit 1/second -j LOG --A logaccept-35 -j ACCEPT --A logaccept-36 -m limit --limit 1/second -j LOG --A logaccept-36 -j ACCEPT --A logaccept-37 -m limit --limit 1/second -j LOG --A logaccept-37 -j ACCEPT --A logaccept-38 -m limit --limit 1/second -j LOG --A logaccept-38 -j ACCEPT --A logaccept-39 -m limit --limit 1/second -j LOG --A logaccept-39 -j ACCEPT -A logaccept-4 -m limit --limit 1/second -j LOG -A logaccept-4 -j ACCEPT --A logaccept-40 -m limit --limit 1/second -j LOG --A logaccept-40 -j ACCEPT --A logaccept-41 -m limit --limit 1/second -j LOG --A logaccept-41 -j ACCEPT --A logaccept-42 -m limit --limit 1/second -j LOG --A logaccept-42 -j ACCEPT --A logaccept-43 -m limit --limit 1/second -j LOG --A logaccept-43 -j ACCEPT --A logaccept-44 -m limit --limit 1/second -j LOG --A logaccept-44 -j ACCEPT --A logaccept-45 -m limit --limit 1/second -j LOG --A logaccept-45 -j ACCEPT --A logaccept-46 -m limit --limit 1/second -j LOG --A logaccept-46 -j ACCEPT --A logaccept-47 -m limit --limit 1/second -j LOG --A logaccept-47 -j ACCEPT --A logaccept-48 -m limit --limit 1/second -j LOG --A logaccept-48 -j ACCEPT --A logaccept-49 -m limit --limit 1/second -j LOG --A logaccept-49 -j ACCEPT -A logaccept-5 -m limit --limit 1/second -j LOG -A logaccept-5 -j ACCEPT --A logaccept-50 -m limit --limit 1/second -j LOG --A logaccept-50 -j ACCEPT --A logaccept-51 -m limit --limit 1/second -j LOG --A logaccept-51 -j ACCEPT --A logaccept-52 -m limit --limit 1/second -j LOG --A logaccept-52 -j ACCEPT --A logaccept-53 -m limit --limit 1/second -j LOG --A logaccept-53 -j ACCEPT --A logaccept-54 -m limit --limit 1/second -j LOG --A logaccept-54 -j ACCEPT --A logaccept-55 -m limit --limit 1/second -j LOG --A logaccept-55 -j ACCEPT --A logaccept-56 -m limit --limit 1/second -j LOG --A logaccept-56 -j ACCEPT --A logaccept-57 -m limit --limit 1/second -j LOG --A logaccept-57 -j ACCEPT --A logaccept-58 -m limit --limit 1/second -j LOG --A logaccept-58 -j ACCEPT --A logaccept-59 -m limit --limit 1/second -j LOG --A logaccept-59 -j ACCEPT -A logaccept-6 -m limit --limit 1/second -j LOG -A logaccept-6 -j ACCEPT --A logaccept-60 -m limit --limit 1/second -j LOG --A logaccept-60 -j ACCEPT --A logaccept-61 -m limit --limit 1/second -j LOG --A logaccept-61 -j ACCEPT --A logaccept-62 -m limit --limit 1/second -j LOG --A logaccept-62 -j ACCEPT --A logaccept-63 -m limit --limit 1/second -j LOG --A logaccept-63 -j ACCEPT --A logaccept-64 -m limit --limit 1/second -j LOG --A logaccept-64 -j ACCEPT --A logaccept-65 -m limit --limit 1/second -j LOG --A logaccept-65 -j ACCEPT --A logaccept-66 -m limit --limit 1/second -j LOG --A logaccept-66 -j ACCEPT --A logaccept-67 -m limit --limit 1/second -j LOG --A logaccept-67 -j ACCEPT --A logaccept-68 -m limit --limit 1/second -j LOG --A logaccept-68 -j ACCEPT --A logaccept-69 -m limit --limit 1/second -j LOG --A logaccept-69 -j ACCEPT -A logaccept-7 -m limit --limit 1/second -j LOG -A logaccept-7 -j ACCEPT --A logaccept-70 -m limit --limit 1/second -j LOG --A logaccept-70 -j ACCEPT --A logaccept-71 -m limit --limit 1/second -j LOG --A logaccept-71 -j ACCEPT --A logaccept-72 -m limit --limit 1/second -j LOG --A logaccept-72 -j ACCEPT --A logaccept-73 -m limit --limit 1/second -j LOG --A logaccept-73 -j ACCEPT --A logaccept-74 -m limit --limit 1/second -j LOG --A logaccept-74 -j ACCEPT --A logaccept-75 -m limit --limit 1/second -j LOG --A logaccept-75 -j ACCEPT --A logaccept-76 -m limit --limit 1/second -j LOG --A logaccept-76 -j ACCEPT --A logaccept-77 -m limit --limit 1/second -j LOG --A logaccept-77 -j ACCEPT --A logaccept-78 -m limit --limit 1/second -j LOG --A logaccept-78 -j ACCEPT --A logaccept-79 -m limit --limit 1/second -j LOG --A logaccept-79 -j ACCEPT -A logaccept-8 -m limit --limit 1/second -j LOG -A logaccept-8 -j ACCEPT --A logaccept-80 -m limit --limit 1/second -j LOG --A logaccept-80 -j ACCEPT --A logaccept-81 -m limit --limit 1/second -j LOG --A logaccept-81 -j ACCEPT --A logaccept-82 -m limit --limit 1/second -j LOG --A logaccept-82 -j ACCEPT --A logaccept-83 -m limit --limit 1/second -j LOG --A logaccept-83 -j ACCEPT --A logaccept-84 -m limit --limit 1/second -j LOG --A logaccept-84 -j ACCEPT -A logaccept-9 -m limit --limit 1/second -j LOG -A logaccept-9 -j ACCEPT -A logaccept-final-0 -m limit --limit 1/second -j LOG @@ -10437,8 +8940,6 @@ -A logdrop-456 -j DROP -A logdrop-457 -m limit --limit 1/second -j LOG -A logdrop-457 -j DROP --A logdrop-458 -m limit --limit 1/second -j LOG --A logdrop-458 -j DROP -A logdrop-46 -m limit --limit 1/second -j LOG -A logdrop-46 -j DROP -A logdrop-47 -m limit --limit 1/second -j LOG @@ -10558,62 +9059,6 @@ -A logdrop-99 -m limit --limit 1/second -j LOG -A logdrop-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG --A logpass-1 -m limit --limit 1/second -j LOG --A logpass-10 -m limit --limit 1/second -j LOG --A logpass-11 -m limit --limit 1/second -j LOG --A logpass-12 -m limit --limit 1/second -j LOG --A logpass-13 -m limit --limit 1/second -j LOG --A logpass-14 -m limit --limit 1/second -j LOG --A logpass-15 -m limit --limit 1/second -j LOG --A logpass-16 -m limit --limit 1/second -j LOG --A logpass-17 -m limit --limit 1/second -j LOG --A logpass-18 -m limit --limit 1/second -j LOG --A logpass-19 -m limit --limit 1/second -j LOG --A logpass-2 -m limit --limit 1/second -j LOG --A logpass-20 -m limit --limit 1/second -j LOG --A logpass-21 -m limit --limit 1/second -j LOG --A logpass-22 -m limit --limit 1/second -j LOG --A logpass-23 -m limit --limit 1/second -j LOG --A logpass-24 -m limit --limit 1/second -j LOG --A logpass-25 -m limit --limit 1/second -j LOG --A logpass-26 -m limit --limit 1/second -j LOG --A logpass-27 -m limit --limit 1/second -j LOG --A logpass-28 -m limit --limit 1/second -j LOG --A logpass-29 -m limit --limit 1/second -j LOG --A logpass-3 -m limit --limit 1/second -j LOG --A logpass-30 -m limit --limit 1/second -j LOG --A logpass-31 -m limit --limit 1/second -j LOG --A logpass-32 -m limit --limit 1/second -j LOG --A logpass-33 -m limit --limit 1/second -j LOG --A logpass-34 -m limit --limit 1/second -j LOG --A logpass-35 -m limit --limit 1/second -j LOG --A logpass-36 -m limit --limit 1/second -j LOG --A logpass-37 -m limit --limit 1/second -j LOG --A logpass-38 -m limit --limit 1/second -j LOG --A logpass-39 -m limit --limit 1/second -j LOG --A logpass-4 -m limit --limit 1/second -j LOG --A logpass-40 -m limit --limit 1/second -j LOG --A logpass-41 -m limit --limit 1/second -j LOG --A logpass-42 -m limit --limit 1/second -j LOG --A logpass-43 -m limit --limit 1/second -j LOG --A logpass-44 -m limit --limit 1/second -j LOG --A logpass-45 -m limit --limit 1/second -j LOG --A logpass-46 -m limit --limit 1/second -j LOG --A logpass-47 -m limit --limit 1/second -j LOG --A logpass-48 -m limit --limit 1/second -j LOG --A logpass-49 -m limit --limit 1/second -j LOG --A logpass-5 -m limit --limit 1/second -j LOG --A logpass-50 -m limit --limit 1/second -j LOG --A logpass-6 -m limit --limit 1/second -j LOG --A logpass-7 -m limit --limit 1/second -j LOG --A logpass-8 -m limit --limit 1/second -j LOG --A logpass-9 -m limit --limit 1/second -j LOG --A logreject-0 -m limit --limit 1/second -j LOG --A logreject-0 -j REJECT --A logtarpit-0 -m limit --limit 1/second -j LOG --A logtarpit-0 -j tarpit --A tarpit -p tcp -j TARPIT --A tarpit -j DROP COMMIT *mangle :FORWARD ACCEPT [0:0] @@ -10645,7 +9090,6 @@ COMMIT *raw :OUTPUT ACCEPT [0:0] :PREROUTING ACCEPT [0:0] --A OUTPUT -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack @@ -10832,17 +9276,7 @@ COMMIT -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -p tcp --dport 80 -j CT --notrack --A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack --A OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack --A OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack --A OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack --A OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack --A OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack --A OUTPUT -p esp -j CT --notrack --A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack -A OUTPUT -j CT --notrack --A PREROUTING -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -11201,15 +9635,6 @@ COMMIT -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack --A PREROUTING -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack --A PREROUTING -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack --A PREROUTING -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack --A PREROUTING -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack --A PREROUTING -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack --A PREROUTING -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack -A PREROUTING -i eth0 -j CT --notrack -A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack diff --git a/test/output/rules6-save b/test/output/filter-limit/rules6-save index d6c06d6..da3fbec 100644 --- a/test/output/rules6-save +++ b/test/output/filter-limit/rules6-save @@ -1341,32 +1341,26 @@ :limit-998 - [0:0] :limit-999 - [0:0] :logaccept-0 - [0:0] +:logaccept-1 - [0:0] +:logaccept-10 - [0:0] +:logaccept-11 - [0:0] +:logaccept-12 - [0:0] +:logaccept-13 - [0:0] +:logaccept-14 - [0:0] +:logaccept-15 - [0:0] +:logaccept-16 - [0:0] +:logaccept-17 - [0:0] :logaccept-18 - [0:0] -:logaccept-27 - [0:0] -:logaccept-36 - [0:0] -:logaccept-45 - [0:0] -:logaccept-63 - [0:0] -:logaccept-64 - [0:0] -:logaccept-65 - [0:0] -:logaccept-66 - [0:0] -:logaccept-67 - [0:0] -:logaccept-68 - [0:0] -:logaccept-69 - [0:0] -:logaccept-70 - [0:0] -:logaccept-71 - [0:0] -:logaccept-72 - [0:0] -:logaccept-73 - [0:0] -:logaccept-74 - [0:0] -:logaccept-75 - [0:0] -:logaccept-76 - [0:0] -:logaccept-77 - [0:0] -:logaccept-78 - [0:0] -:logaccept-79 - [0:0] -:logaccept-80 - [0:0] -:logaccept-81 - [0:0] -:logaccept-82 - [0:0] -:logaccept-83 - [0:0] -:logaccept-84 - [0:0] +:logaccept-19 - [0:0] +:logaccept-2 - [0:0] +:logaccept-20 - [0:0] +:logaccept-21 - [0:0] +:logaccept-3 - [0:0] +:logaccept-4 - [0:0] +:logaccept-5 - [0:0] +:logaccept-6 - [0:0] +:logaccept-7 - [0:0] +:logaccept-8 - [0:0] :logaccept-9 - [0:0] :logaccept-final-0 - [0:0] :logaccept-final-1 - [0:0] @@ -1829,7 +1823,6 @@ :logdrop-455 - [0:0] :logdrop-456 - [0:0] :logdrop-457 - [0:0] -:logdrop-458 - [0:0] :logdrop-46 - [0:0] :logdrop-47 - [0:0] :logdrop-48 - [0:0] @@ -1890,14 +1883,6 @@ :logdrop-98 - [0:0] :logdrop-99 - [0:0] :logpass-0 - [0:0] -:logpass-16 - [0:0] -:logpass-30 - [0:0] -:logpass-37 - [0:0] -:logpass-50 - [0:0] -:logpass-9 - [0:0] -:logreject-0 - [0:0] -:logtarpit-0 - [0:0] -:tarpit - [0:0] -A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -j limit-1073 @@ -2259,36 +2244,6 @@ -A FORWARD -j limit-717 -A FORWARD -j limit-716 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD --A FORWARD -j logaccept-0 --A FORWARD -j logpass-0 --A FORWARD -o eth1 -d fc00::/7 -j ACCEPT --A FORWARD -o eth1 -d fc00::/7 --A FORWARD -o eth1 -d fc00::/7 -j logaccept-9 --A FORWARD -o eth1 -d fc00::/7 -j logpass-9 --A FORWARD -i eth0 -j ACCEPT --A FORWARD -i eth0 --A FORWARD -i eth0 -j logaccept-18 --A FORWARD -i eth0 -j logpass-16 --A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT --A FORWARD -i eth0 -o eth1 -d fc00::/7 --A FORWARD -i eth0 -o eth1 -d fc00::/7 -j logaccept-27 --A FORWARD -i eth0 -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG --A FORWARD -i eth1 -s fc00::/7 -j ACCEPT --A FORWARD -i eth1 -s fc00::/7 --A FORWARD -i eth1 -s fc00::/7 -j logaccept-36 --A FORWARD -i eth1 -s fc00::/7 -j logpass-30 --A FORWARD -i eth1 -s fc00::/7 -j ACCEPT --A FORWARD -i eth1 -s fc00::/7 --A FORWARD -i eth1 -s fc00::/7 -j logaccept-45 --A FORWARD -i eth1 -s fc00::/7 -j logpass-37 --A FORWARD -j ACCEPT --A FORWARD -j ACCEPT --A FORWARD -j logdrop-0 --A FORWARD --A FORWARD -j logreject-0 --A FORWARD -j logtarpit-0 -A FORWARD -o eth1 -d fc00::/7 -j limit-0 -A FORWARD -o eth1 -d fc00::/7 -j limit-1 -A FORWARD -o eth1 -d fc00::/7 -j limit-2 @@ -2840,14 +2795,14 @@ -A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -j ACCEPT --A FORWARD -j logdrop-457 +-A FORWARD -j logdrop-456 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-84 --A FORWARD -j logdrop-458 --A FORWARD -j logpass-50 +-A FORWARD -j logaccept-21 +-A FORWARD -j logdrop-457 +-A FORWARD -j logpass-0 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD @@ -3240,28 +3195,6 @@ -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT --A INPUT --A INPUT -j logaccept-0 --A INPUT -j logpass-0 --A INPUT -i eth0 -j ACCEPT --A INPUT -i eth0 --A INPUT -i eth0 -j logaccept-18 --A INPUT -i eth0 -j logpass-16 --A INPUT -i eth1 -s fc00::/7 -j ACCEPT --A INPUT -i eth1 -s fc00::/7 --A INPUT -i eth1 -s fc00::/7 -j logaccept-36 --A INPUT -i eth1 -s fc00::/7 -j logpass-30 --A INPUT -i eth1 -s fc00::/7 -j ACCEPT --A INPUT -i eth1 -s fc00::/7 --A INPUT -i eth1 -s fc00::/7 -j logaccept-45 --A INPUT -i eth1 -s fc00::/7 -j logpass-37 --A INPUT -j ACCEPT --A INPUT -j ACCEPT --A INPUT -j logdrop-0 --A INPUT --A INPUT -j logreject-0 --A INPUT -j logtarpit-0 --A INPUT -j ACCEPT -A INPUT -j logaccept-final-0 -A INPUT -j ACCEPT -A INPUT -j ACCEPT @@ -3466,11 +3399,11 @@ -A INPUT -i eth0 -j limit-1090 -A INPUT -i eth0 -j limit-1091 -A INPUT -i eth0 -j limit-1092 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-362 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-361 -A INPUT -i eth0 -j limit-1094 -A INPUT -i eth0 -j limit-1095 -A INPUT -i eth0 -j limit-1096 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-366 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-365 -A INPUT -i eth0 -j limit-1098 -A INPUT -i eth0 -j limit-1099 -A INPUT -i eth0 -j limit-1100 @@ -3478,11 +3411,11 @@ -A INPUT -i eth0 -j limit-1102 -A INPUT -i eth0 -j limit-1103 -A INPUT -i eth0 -j limit-1104 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-374 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-373 -A INPUT -i eth0 -j limit-1106 -A INPUT -i eth0 -j limit-1107 -A INPUT -i eth0 -j limit-1108 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-378 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-377 -A INPUT -i eth0 -j limit-1110 -A INPUT -i eth0 -j limit-1111 -A INPUT -i eth0 -j limit-1112 @@ -3490,11 +3423,11 @@ -A INPUT -i eth0 -j limit-1114 -A INPUT -i eth0 -j limit-1115 -A INPUT -i eth0 -j limit-1116 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-386 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-385 -A INPUT -i eth0 -j limit-1118 -A INPUT -i eth0 -j limit-1119 -A INPUT -i eth0 -j limit-1120 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-390 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-389 -A INPUT -i eth0 -j limit-1122 -A INPUT -i eth0 -j limit-1123 -A INPUT -i eth0 -j limit-1124 @@ -3502,11 +3435,11 @@ -A INPUT -i eth0 -j limit-1126 -A INPUT -i eth0 -j limit-1127 -A INPUT -i eth0 -j limit-1128 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-398 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-397 -A INPUT -i eth0 -j limit-1130 -A INPUT -i eth0 -j limit-1131 -A INPUT -i eth0 -j limit-1132 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-402 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-401 -A INPUT -i eth0 -j limit-1134 -A INPUT -i eth0 -j limit-1135 -A INPUT -i eth0 -j limit-1136 @@ -3628,11 +3561,11 @@ -A INPUT -i eth0 -j limit-1252 -A INPUT -i eth0 -j limit-1253 -A INPUT -i eth0 -j limit-1254 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-416 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-415 -A INPUT -i eth0 -j limit-1256 -A INPUT -i eth0 -j limit-1257 -A INPUT -i eth0 -j limit-1258 --A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-420 +-A INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-419 -A INPUT -i eth0 -j limit-1260 -A INPUT -i eth0 -j limit-1261 -A INPUT -i eth0 -j limit-1262 @@ -3640,11 +3573,11 @@ -A INPUT -i eth0 -j limit-1264 -A INPUT -i eth0 -j limit-1265 -A INPUT -i eth0 -j limit-1266 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-428 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-427 -A INPUT -i eth0 -j limit-1268 -A INPUT -i eth0 -j limit-1269 -A INPUT -i eth0 -j limit-1270 --A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-432 +-A INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-431 -A INPUT -i eth0 -j limit-1272 -A INPUT -i eth0 -j limit-1273 -A INPUT -i eth0 -j limit-1274 @@ -3652,11 +3585,11 @@ -A INPUT -i eth0 -j limit-1276 -A INPUT -i eth0 -j limit-1277 -A INPUT -i eth0 -j limit-1278 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-440 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-439 -A INPUT -i eth0 -j limit-1280 -A INPUT -i eth0 -j limit-1281 -A INPUT -i eth0 -j limit-1282 --A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-444 +-A INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-443 -A INPUT -i eth0 -j limit-1284 -A INPUT -i eth0 -j limit-1285 -A INPUT -i eth0 -j limit-1286 @@ -3664,11 +3597,11 @@ -A INPUT -i eth0 -j limit-1288 -A INPUT -i eth0 -j limit-1289 -A INPUT -i eth0 -j limit-1290 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-452 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-451 -A INPUT -i eth0 -j limit-1292 -A INPUT -i eth0 -j limit-1293 -A INPUT -i eth0 -j limit-1294 --A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-456 +-A INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-455 -A INPUT -i eth0 -j limit-1296 -A INPUT -i eth0 -j limit-1297 -A INPUT -i eth0 -j limit-1298 @@ -3812,20 +3745,17 @@ -A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -j ACCEPT --A INPUT -j logdrop-457 +-A INPUT -j logdrop-456 -A INPUT -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-84 --A INPUT -j logdrop-458 --A INPUT -j logpass-50 +-A INPUT -j logaccept-21 +-A INPUT -j logdrop-457 +-A INPUT -j logpass-0 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -p tcp --sport 80 -j ACCEPT --A INPUT -p esp -j ACCEPT --A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmpv6 -j ACCEPT @@ -4191,20 +4121,6 @@ -A OUTPUT -j limit-716 -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT --A OUTPUT -j logaccept-0 --A OUTPUT -j logpass-0 --A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT --A OUTPUT -o eth1 -d fc00::/7 --A OUTPUT -o eth1 -d fc00::/7 -j logaccept-9 --A OUTPUT -o eth1 -d fc00::/7 -j logpass-9 --A OUTPUT -j ACCEPT --A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-0 --A OUTPUT --A OUTPUT -j logreject-0 --A OUTPUT -j logtarpit-0 -A OUTPUT -o eth1 -d fc00::/7 -j limit-0 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1 -A OUTPUT -o eth1 -d fc00::/7 -j limit-2 @@ -4582,11 +4498,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-374 -A OUTPUT -o eth1 -d fc00::/7 -j limit-375 -A OUTPUT -o eth1 -d fc00::/7 -j limit-376 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-134 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-133 -A OUTPUT -o eth1 -d fc00::/7 -j limit-378 -A OUTPUT -o eth1 -d fc00::/7 -j limit-379 -A OUTPUT -o eth1 -d fc00::/7 -j limit-380 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-138 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-137 -A OUTPUT -o eth1 -d fc00::/7 -j limit-382 -A OUTPUT -o eth1 -d fc00::/7 -j limit-383 -A OUTPUT -o eth1 -d fc00::/7 -j limit-384 @@ -4594,11 +4510,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-386 -A OUTPUT -o eth1 -d fc00::/7 -j limit-387 -A OUTPUT -o eth1 -d fc00::/7 -j limit-388 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 -A OUTPUT -o eth1 -d fc00::/7 -j limit-390 -A OUTPUT -o eth1 -d fc00::/7 -j limit-391 -A OUTPUT -o eth1 -d fc00::/7 -j limit-392 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-150 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 -A OUTPUT -o eth1 -d fc00::/7 -j limit-394 -A OUTPUT -o eth1 -d fc00::/7 -j limit-395 -A OUTPUT -o eth1 -d fc00::/7 -j limit-396 @@ -4606,11 +4522,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-398 -A OUTPUT -o eth1 -d fc00::/7 -j limit-399 -A OUTPUT -o eth1 -d fc00::/7 -j limit-400 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-158 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-157 -A OUTPUT -o eth1 -d fc00::/7 -j limit-402 -A OUTPUT -o eth1 -d fc00::/7 -j limit-403 -A OUTPUT -o eth1 -d fc00::/7 -j limit-404 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-162 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 -A OUTPUT -o eth1 -d fc00::/7 -j limit-406 -A OUTPUT -o eth1 -d fc00::/7 -j limit-407 -A OUTPUT -o eth1 -d fc00::/7 -j limit-408 @@ -4618,11 +4534,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-410 -A OUTPUT -o eth1 -d fc00::/7 -j limit-411 -A OUTPUT -o eth1 -d fc00::/7 -j limit-412 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-170 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 -A OUTPUT -o eth1 -d fc00::/7 -j limit-414 -A OUTPUT -o eth1 -d fc00::/7 -j limit-415 -A OUTPUT -o eth1 -d fc00::/7 -j limit-416 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-174 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-173 -A OUTPUT -o eth1 -d fc00::/7 -j limit-418 -A OUTPUT -o eth1 -d fc00::/7 -j limit-419 -A OUTPUT -o eth1 -d fc00::/7 -j limit-420 @@ -4744,11 +4660,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-536 -A OUTPUT -o eth1 -d fc00::/7 -j limit-537 -A OUTPUT -o eth1 -d fc00::/7 -j limit-538 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 -A OUTPUT -o eth1 -d fc00::/7 -j limit-540 -A OUTPUT -o eth1 -d fc00::/7 -j limit-541 -A OUTPUT -o eth1 -d fc00::/7 -j limit-542 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-192 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 -A OUTPUT -o eth1 -d fc00::/7 -j limit-544 -A OUTPUT -o eth1 -d fc00::/7 -j limit-545 -A OUTPUT -o eth1 -d fc00::/7 -j limit-546 @@ -4756,11 +4672,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-548 -A OUTPUT -o eth1 -d fc00::/7 -j limit-549 -A OUTPUT -o eth1 -d fc00::/7 -j limit-550 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-200 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-199 -A OUTPUT -o eth1 -d fc00::/7 -j limit-552 -A OUTPUT -o eth1 -d fc00::/7 -j limit-553 -A OUTPUT -o eth1 -d fc00::/7 -j limit-554 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-204 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-203 -A OUTPUT -o eth1 -d fc00::/7 -j limit-556 -A OUTPUT -o eth1 -d fc00::/7 -j limit-557 -A OUTPUT -o eth1 -d fc00::/7 -j limit-558 @@ -4768,11 +4684,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-560 -A OUTPUT -o eth1 -d fc00::/7 -j limit-561 -A OUTPUT -o eth1 -d fc00::/7 -j limit-562 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-212 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-211 -A OUTPUT -o eth1 -d fc00::/7 -j limit-564 -A OUTPUT -o eth1 -d fc00::/7 -j limit-565 -A OUTPUT -o eth1 -d fc00::/7 -j limit-566 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-216 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-215 -A OUTPUT -o eth1 -d fc00::/7 -j limit-568 -A OUTPUT -o eth1 -d fc00::/7 -j limit-569 -A OUTPUT -o eth1 -d fc00::/7 -j limit-570 @@ -4780,11 +4696,11 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-572 -A OUTPUT -o eth1 -d fc00::/7 -j limit-573 -A OUTPUT -o eth1 -d fc00::/7 -j limit-574 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-224 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 -A OUTPUT -o eth1 -d fc00::/7 -j limit-576 -A OUTPUT -o eth1 -d fc00::/7 -j limit-577 -A OUTPUT -o eth1 -d fc00::/7 -j limit-578 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-228 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-227 -A OUTPUT -o eth1 -d fc00::/7 -j limit-580 -A OUTPUT -o eth1 -d fc00::/7 -j limit-581 -A OUTPUT -o eth1 -d fc00::/7 -j limit-582 @@ -5300,20 +5216,17 @@ -A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-457 +-A OUTPUT -j logdrop-456 -A OUTPUT -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-84 --A OUTPUT -j logdrop-458 --A OUTPUT -j logpass-50 +-A OUTPUT -j logaccept-21 +-A OUTPUT -j logdrop-457 +-A OUTPUT -j logpass-0 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -p tcp --dport 80 -j ACCEPT --A OUTPUT -p esp -j ACCEPT --A OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -A OUTPUT -p icmpv6 -j ACCEPT @@ -5321,11 +5234,11 @@ -A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT -A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT -A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT --A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1 +-A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-0 -A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-2 +-A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1 -A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 +-A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 -A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-100 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-100 -j ACCEPT @@ -5483,132 +5396,132 @@ -A limit-1072 -j DROP -A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1073 -j RETURN -A limit-1073 -j DROP --A limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-343 +-A limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-342 -A limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-344 +-A limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-343 -A limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-345 +-A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-344 -A limit-1076 -m limit --limit 1/second -j LOG -A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-346 +-A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-345 -A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-347 +-A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-346 -A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-348 +-A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-347 -A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-108 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-108 -j ACCEPT --A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-349 +-A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-348 -A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-350 +-A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-349 -A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-351 +-A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-350 -A limit-1082 -m limit --limit 1/second -j LOG -A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-352 +-A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-351 -A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-353 +-A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-352 -A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-354 +-A limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-353 -A limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-355 +-A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-354 -A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-356 +-A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-355 -A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-357 +-A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-356 -A limit-1088 -m limit --limit 1/second -j LOG -A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-358 +-A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-357 -A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-109 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-359 +-A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-358 -A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-360 +-A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-359 -A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-361 +-A limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-360 -A limit-1092 -j ACCEPT --A limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-363 +-A limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-362 -A limit-1094 -m limit --limit 1/second -j LOG -A limit-1094 -j ACCEPT --A limit-1095 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-364 +-A limit-1095 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-363 -A limit-1095 -m limit --limit 1/second -j LOG --A limit-1096 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-365 +-A limit-1096 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-364 -A limit-1096 -j ACCEPT --A limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-367 +-A limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-366 -A limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-368 +-A limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-367 -A limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 +-A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 -A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-110 -m limit --limit 1/second -j LOG -A limit-110 -j ACCEPT --A limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-369 +-A limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-368 -A limit-1100 -m limit --limit 1/second -j LOG -A limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-370 +-A limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-369 -A limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-371 +-A limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-370 -A limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-372 +-A limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-371 -A limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-373 +-A limit-1104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-372 -A limit-1104 -j ACCEPT --A limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-375 +-A limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-374 -A limit-1106 -m limit --limit 1/second -j LOG -A limit-1106 -j ACCEPT --A limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-376 +-A limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-375 -A limit-1107 -m limit --limit 1/second -j LOG --A limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-377 +-A limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-376 -A limit-1108 -j ACCEPT -A limit-111 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-111 -m limit --limit 1/second -j LOG --A limit-1110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-379 +-A limit-1110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-378 -A limit-1110 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-380 +-A limit-1111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-379 -A limit-1111 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1112 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-381 +-A limit-1112 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-380 -A limit-1112 -m limit --limit 1/second -j LOG -A limit-1112 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1113 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-382 +-A limit-1113 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-381 -A limit-1113 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1114 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-383 +-A limit-1114 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-382 -A limit-1114 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1115 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-384 +-A limit-1115 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-383 -A limit-1115 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1116 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-385 +-A limit-1116 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-384 -A limit-1116 -j ACCEPT --A limit-1118 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-387 +-A limit-1118 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-386 -A limit-1118 -m limit --limit 1/second -j LOG -A limit-1118 -j ACCEPT --A limit-1119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-388 +-A limit-1119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-387 -A limit-1119 -m limit --limit 1/second -j LOG -A limit-112 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-112 -j ACCEPT --A limit-1120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-389 +-A limit-1120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-388 -A limit-1120 -j ACCEPT --A limit-1122 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-391 +-A limit-1122 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-390 -A limit-1122 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1123 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-392 +-A limit-1123 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-391 -A limit-1123 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1124 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-393 +-A limit-1124 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-392 -A limit-1124 -m limit --limit 1/second -j LOG -A limit-1124 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-394 +-A limit-1125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-393 -A limit-1125 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-395 +-A limit-1126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-394 -A limit-1126 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-396 +-A limit-1127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-395 -A limit-1127 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1128 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-397 +-A limit-1128 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-396 -A limit-1128 -j ACCEPT -A limit-113 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1130 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-399 +-A limit-1130 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-398 -A limit-1130 -m limit --limit 1/second -j LOG -A limit-1130 -j ACCEPT --A limit-1131 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-400 +-A limit-1131 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-399 -A limit-1131 -m limit --limit 1/second -j LOG --A limit-1132 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-401 +-A limit-1132 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-400 -A limit-1132 -j ACCEPT -A limit-1134 -m recent --name limit-1134 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1134 -m recent --name limit-1134 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -5750,7 +5663,7 @@ -A limit-1198 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1199 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 +-A limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 -A limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -5838,116 +5751,116 @@ -A limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1240 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1240 -j ACCEPT --A limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-403 +-A limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-402 -A limit-1242 -m recent --name limit-1242 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-404 +-A limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-403 -A limit-1243 -m recent --name limit-1243 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-405 +-A limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-404 -A limit-1244 -m limit --limit 1/second -j LOG -A limit-1244 -m recent --name limit-1244 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-406 +-A limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-405 -A limit-1245 -m recent --name limit-1245 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-407 +-A limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-406 -A limit-1246 -m recent --name limit-1246 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-408 +-A limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-407 -A limit-1247 -m recent --name limit-1247 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-409 +-A limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-408 -A limit-1248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-410 +-A limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-409 -A limit-1249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-411 +-A limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-410 -A limit-1250 -m limit --limit 1/second -j LOG -A limit-1250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-412 +-A limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-411 -A limit-1251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-413 +-A limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-412 -A limit-1252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-414 +-A limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-413 -A limit-1253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1254 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-415 +-A limit-1254 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-414 -A limit-1254 -j ACCEPT --A limit-1256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-417 +-A limit-1256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-416 -A limit-1256 -m limit --limit 1/second -j LOG -A limit-1256 -j ACCEPT --A limit-1257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-418 +-A limit-1257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-417 -A limit-1257 -m limit --limit 1/second -j LOG --A limit-1258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-419 +-A limit-1258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-418 -A limit-1258 -j ACCEPT -A limit-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-126 -j ACCEPT --A limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-421 +-A limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-420 -A limit-1260 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-422 +-A limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-421 -A limit-1261 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-423 +-A limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-422 -A limit-1262 -m limit --limit 1/second -j LOG -A limit-1262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-424 +-A limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-423 -A limit-1263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-425 +-A limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-424 -A limit-1264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-426 +-A limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-425 -A limit-1265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-1266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-427 +-A limit-1266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-426 -A limit-1266 -j ACCEPT --A limit-1268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-429 +-A limit-1268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-428 -A limit-1268 -m limit --limit 1/second -j LOG -A limit-1268 -j ACCEPT --A limit-1269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-430 +-A limit-1269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-429 -A limit-1269 -m limit --limit 1/second -j LOG -A limit-127 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-431 +-A limit-1270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-430 -A limit-1270 -j ACCEPT --A limit-1272 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-433 +-A limit-1272 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-432 -A limit-1272 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1273 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-434 +-A limit-1273 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-433 -A limit-1273 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1274 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-435 +-A limit-1274 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-434 -A limit-1274 -m limit --limit 1/second -j LOG -A limit-1274 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1275 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-436 +-A limit-1275 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-435 -A limit-1275 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1276 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-437 +-A limit-1276 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-436 -A limit-1276 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-1277 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-438 +-A limit-1277 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-437 -A limit-1277 -m recent --name user:C --rsource --mask fe00:: --set --A limit-1278 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-439 +-A limit-1278 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-438 -A limit-1278 -j ACCEPT -A limit-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-128 -m limit --limit 1/second -j LOG -A limit-128 -j ACCEPT --A limit-1280 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-441 +-A limit-1280 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-440 -A limit-1280 -m limit --limit 1/second -j LOG -A limit-1280 -j ACCEPT --A limit-1281 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-442 +-A limit-1281 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-441 -A limit-1281 -m limit --limit 1/second -j LOG --A limit-1282 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-443 +-A limit-1282 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-442 -A limit-1282 -j ACCEPT --A limit-1284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-445 +-A limit-1284 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-444 -A limit-1284 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-446 +-A limit-1285 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-445 -A limit-1285 -m recent --name user:C --rdest --mask fe00:: --set --A limit-1286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-447 +-A limit-1286 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-446 -A limit-1286 -m limit --limit 1/second -j LOG -A limit-1286 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-448 +-A limit-1287 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-447 -A limit-1287 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-1288 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-449 +-A limit-1288 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-448 -A limit-1288 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1289 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-450 +-A limit-1289 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-449 -A limit-1289 -m recent --name user:C --rdest --mask fe00:: --set -A limit-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-129 -m limit --limit 1/second -j LOG --A limit-1290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-451 +-A limit-1290 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-450 -A limit-1290 -j ACCEPT --A limit-1292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-453 +-A limit-1292 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-452 -A limit-1292 -m limit --limit 1/second -j LOG -A limit-1292 -j ACCEPT --A limit-1293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-454 +-A limit-1293 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-453 -A limit-1293 -m limit --limit 1/second -j LOG --A limit-1294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-455 +-A limit-1294 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-454 -A limit-1294 -j ACCEPT -A limit-1296 -m recent --name limit-1296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1296 -m recent --name limit-1296 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -5958,7 +5871,7 @@ -A limit-1298 -m recent --name limit-1298 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1299 -m recent --name limit-1299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1299 -m recent --name limit-1299 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 +-A limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 -A limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-130 -j ACCEPT @@ -6165,7 +6078,7 @@ -A limit-1397 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1398 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1398 -j ACCEPT --A limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 +-A limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 -A limit-14 -m limit --limit 1/second -j LOG -A limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP @@ -6184,7 +6097,7 @@ -A limit-1405 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1405 -j RETURN -A limit-1405 -m limit --limit 1/second -j LOG -A limit-1405 -j DROP --A limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1406 -j logaccept-77 +-A limit-1406 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1406 -j logaccept-14 -A limit-1406 -m limit --limit 1/second -j LOG -A limit-1406 -j DROP -A limit-1407 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1407 -j ACCEPT @@ -6198,7 +6111,7 @@ -A limit-1409 -j DROP -A limit-141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-141 -m limit --limit 1/second -j LOG --A limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1410 -j logaccept-78 +-A limit-1410 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1410 -j logaccept-15 -A limit-1410 -m limit --limit 1/second -j LOG -A limit-1410 -j DROP -A limit-1411 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1411 -j ACCEPT @@ -6208,7 +6121,7 @@ -A limit-1412 -j DROP -A limit-1413 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1413 -j RETURN -A limit-1413 -j DROP --A limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1414 -j logaccept-79 +-A limit-1414 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1414 -j logaccept-16 -A limit-1414 -j DROP -A limit-1415 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1415 -j ACCEPT -A limit-1415 -j DROP @@ -6216,7 +6129,7 @@ -A limit-1416 -j DROP -A limit-1417 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1417 -j RETURN -A limit-1417 -j DROP --A limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1418 -j logaccept-80 +-A limit-1418 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1418 -j logaccept-17 -A limit-1418 -j DROP -A limit-1419 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1419 -j ACCEPT -A limit-1419 -j DROP @@ -6228,7 +6141,7 @@ -A limit-1421 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1421 -j RETURN -A limit-1421 -m limit --limit 1/second -j LOG -A limit-1421 -j DROP --A limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1422 -j logaccept-81 +-A limit-1422 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1422 -j logaccept-18 -A limit-1422 -m limit --limit 1/second -j LOG -A limit-1422 -j DROP -A limit-1423 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1423 -j ACCEPT @@ -6238,7 +6151,7 @@ -A limit-1424 -j DROP -A limit-1425 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1425 -j RETURN -A limit-1425 -j DROP --A limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1426 -j logaccept-82 +-A limit-1426 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1426 -j logaccept-19 -A limit-1426 -j DROP -A limit-1427 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1427 -j ACCEPT -A limit-1427 -j DROP @@ -6247,7 +6160,7 @@ -A limit-1429 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1429 -j RETURN -A limit-1429 -j DROP -A limit-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1430 -j logaccept-83 +-A limit-1430 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1430 -j logaccept-20 -A limit-1430 -j DROP -A limit-1431 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1431 -j ACCEPT -A limit-1431 -j DROP @@ -6264,7 +6177,7 @@ -A limit-148 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-149 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-149 -m recent --name user:C --rsource --mask fe00:: --set --A limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 +-A limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 -A limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-150 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-150 -j ACCEPT @@ -6286,7 +6199,7 @@ -A limit-158 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-159 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-159 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 +-A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 -A limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-160 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-160 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT @@ -6303,130 +6216,130 @@ -A limit-166 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-166 -j ACCEPT -A limit-167 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-61 +-A limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-60 -A limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-62 +-A limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-61 -A limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-18 +-A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 -A limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-63 +-A limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-62 -A limit-170 -m limit --limit 1/second -j LOG -A limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-64 +-A limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-63 -A limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-65 +-A limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-64 -A limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-66 +-A limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-65 -A limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-67 +-A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-66 -A limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-68 +-A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-67 -A limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-69 +-A limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-68 -A limit-176 -m limit --limit 1/second -j LOG -A limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-70 +-A limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-69 -A limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-71 +-A limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-70 -A limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-72 +-A limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-71 -A limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-19 +-A limit-18 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-18 -A limit-18 -j ACCEPT --A limit-180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-73 +-A limit-180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-72 -A limit-180 -j ACCEPT --A limit-181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 --A limit-182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-75 +-A limit-181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-73 +-A limit-182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 -A limit-182 -m limit --limit 1/second -j LOG -A limit-182 -j ACCEPT --A limit-183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-76 +-A limit-183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-75 -A limit-183 -m limit --limit 1/second -j LOG --A limit-184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-77 +-A limit-184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-76 -A limit-184 -j ACCEPT --A limit-185 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-78 --A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-79 +-A limit-185 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-77 +-A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-78 -A limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-80 +-A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-79 -A limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-81 +-A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-80 -A limit-188 -m limit --limit 1/second -j LOG -A limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-82 +-A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-81 -A limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-19 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-20 --A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-83 +-A limit-19 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-19 +-A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-82 -A limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-84 +-A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-83 -A limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-192 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-85 +-A limit-192 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-84 -A limit-192 -j ACCEPT --A limit-193 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 --A limit-194 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-87 +-A limit-193 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-85 +-A limit-194 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 -A limit-194 -m limit --limit 1/second -j LOG -A limit-194 -j ACCEPT --A limit-195 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-88 +-A limit-195 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-87 -A limit-195 -m limit --limit 1/second -j LOG --A limit-196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-89 +-A limit-196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-88 -A limit-196 -j ACCEPT --A limit-197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-90 --A limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-91 +-A limit-197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-89 +-A limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-90 -A limit-198 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-92 +-A limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-91 -A limit-199 -m recent --name user:C --rsource --mask fe00:: --set --A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 +-A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-2 -A limit-2 -m limit --limit 1/second -j LOG -A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-21 +-A limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-20 -A limit-20 -m limit --limit 1/second -j LOG -A limit-20 -j ACCEPT --A limit-200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-93 +-A limit-200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-92 -A limit-200 -m limit --limit 1/second -j LOG -A limit-200 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-94 +-A limit-201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-93 -A limit-201 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-202 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-95 +-A limit-202 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-94 -A limit-202 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-203 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-96 +-A limit-203 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-95 -A limit-203 -m recent --name user:C --rsource --mask fe00:: --set --A limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-97 +-A limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-96 -A limit-204 -j ACCEPT --A limit-205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 --A limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-99 +-A limit-205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-97 +-A limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 -A limit-206 -m limit --limit 1/second -j LOG -A limit-206 -j ACCEPT --A limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-100 +-A limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-99 -A limit-207 -m limit --limit 1/second -j LOG --A limit-208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-101 +-A limit-208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-100 -A limit-208 -j ACCEPT --A limit-209 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-102 --A limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-22 +-A limit-209 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-101 +-A limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-21 -A limit-21 -m limit --limit 1/second -j LOG --A limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-103 +-A limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-102 -A limit-210 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-104 +-A limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-103 -A limit-211 -m recent --name user:C --rdest --mask fe00:: --set --A limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-105 +-A limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-104 -A limit-212 -m limit --limit 1/second -j LOG -A limit-212 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-106 +-A limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-105 -A limit-213 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-107 +-A limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-106 -A limit-214 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-108 +-A limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-107 -A limit-215 -m recent --name user:C --rdest --mask fe00:: --set --A limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-109 +-A limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-108 -A limit-216 -j ACCEPT --A limit-217 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 --A limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-111 +-A limit-217 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-109 +-A limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 -A limit-218 -m limit --limit 1/second -j LOG -A limit-218 -j ACCEPT --A limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-112 +-A limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-111 -A limit-219 -m limit --limit 1/second -j LOG --A limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-23 +-A limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-22 -A limit-22 -j ACCEPT --A limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-113 +-A limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-112 -A limit-220 -j ACCEPT --A limit-221 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-114 +-A limit-221 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-113 -A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP @@ -6444,7 +6357,7 @@ -A limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-24 +-A limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-23 -A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-230 -m limit --limit 1/second -j LOG -A limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -6465,7 +6378,7 @@ -A limit-238 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-238 -j ACCEPT -A limit-239 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 +-A limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-24 -A limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -6488,7 +6401,7 @@ -A limit-248 -j ACCEPT -A limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-249 -m limit --limit 1/second -j LOG --A limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 +-A limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 -A limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-250 -j ACCEPT @@ -6509,7 +6422,7 @@ -A limit-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-258 -j ACCEPT -A limit-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 +-A limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 -A limit-26 -m limit --limit 1/second -j LOG -A limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-260 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP @@ -6533,7 +6446,7 @@ -A limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-269 -m recent --name user:C --rdest --mask fe00:: --set --A limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 +-A limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 -A limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-270 -j ACCEPT @@ -6555,7 +6468,7 @@ -A limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 +-A limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 -A limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -6577,7 +6490,7 @@ -A limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-288 -j ACCEPT -A limit-289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-30 +-A limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 -A limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-290 -m limit --limit 1/second -j LOG @@ -6600,9 +6513,9 @@ -A limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 +-A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 -A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-30 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 +-A limit-30 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-30 -A limit-30 -j ACCEPT -A limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-300 -j ACCEPT @@ -6624,7 +6537,7 @@ -A limit-308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-309 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-31 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 +-A limit-31 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 -A limit-310 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-311 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP @@ -6644,7 +6557,7 @@ -A limit-318 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-319 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-319 -m recent --name user:C --rdest --mask fe00:: --set --A limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 +-A limit-32 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 -A limit-32 -m limit --limit 1/second -j LOG -A limit-32 -j ACCEPT -A limit-320 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP @@ -6667,7 +6580,7 @@ -A limit-328 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-328 -j ACCEPT -A limit-329 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP --A limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 +-A limit-33 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 -A limit-33 -m limit --limit 1/second -j LOG -A limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-330 -j ACCEPT -A limit-330 -m limit --limit 1/second -j LOG @@ -6675,7 +6588,7 @@ -A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-331 -j RETURN -A limit-331 -m limit --limit 1/second -j LOG -A limit-331 -j DROP --A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-63 +-A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-0 -A limit-332 -m limit --limit 1/second -j LOG -A limit-332 -j DROP -A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-333 -j ACCEPT @@ -6687,7 +6600,7 @@ -A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-335 -j RETURN -A limit-335 -m limit --limit 1/second -j LOG -A limit-335 -j DROP --A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-64 +-A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-1 -A limit-336 -m limit --limit 1/second -j LOG -A limit-336 -j DROP -A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-337 -j ACCEPT @@ -6697,9 +6610,9 @@ -A limit-338 -j DROP -A limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-339 -j RETURN -A limit-339 -j DROP --A limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 +-A limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 -A limit-34 -j ACCEPT --A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-65 +-A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-2 -A limit-340 -j DROP -A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-341 -j ACCEPT -A limit-341 -j DROP @@ -6707,7 +6620,7 @@ -A limit-342 -j DROP -A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-343 -j RETURN -A limit-343 -j DROP --A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-66 +-A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-3 -A limit-344 -j DROP -A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-345 -j ACCEPT -A limit-345 -j DROP @@ -6717,18 +6630,18 @@ -A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-347 -j RETURN -A limit-347 -m limit --limit 1/second -j LOG -A limit-347 -j DROP --A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-67 +-A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-4 -A limit-348 -m limit --limit 1/second -j LOG -A limit-348 -j DROP -A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-349 -j ACCEPT -A limit-349 -m limit --limit 1/second -j LOG -A limit-349 -j DROP --A limit-35 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36 +-A limit-35 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 -A limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-350 -j ACCEPT -A limit-350 -j DROP -A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-351 -j RETURN -A limit-351 -j DROP --A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-68 +-A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-5 -A limit-352 -j DROP -A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-353 -j ACCEPT -A limit-353 -j DROP @@ -6736,144 +6649,144 @@ -A limit-354 -j DROP -A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-355 -j RETURN -A limit-355 -j DROP --A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-69 +-A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-6 -A limit-356 -j DROP -A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-357 -j ACCEPT -A limit-357 -j DROP --A limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 +-A limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-114 -A limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 +-A limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 -A limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-36 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-37 +-A limit-36 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-36 -A limit-36 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 +-A limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 -A limit-360 -m limit --limit 1/second -j LOG -A limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 +-A limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 -A limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 +-A limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 -A limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-120 +-A limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 -A limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-121 +-A limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-120 -A limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-122 +-A limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-121 -A limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-123 +-A limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-122 -A limit-366 -m limit --limit 1/second -j LOG -A limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-124 +-A limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-123 -A limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-125 +-A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-124 -A limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-126 +-A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-125 -A limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-37 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-38 +-A limit-37 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-37 -A limit-37 -m recent --name user:C --rsource --mask fe00:: --set --A limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-127 +-A limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-126 -A limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-128 +-A limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-127 -A limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-129 +-A limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-128 -A limit-372 -m limit --limit 1/second -j LOG -A limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 +-A limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-129 -A limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 +-A limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 -A limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-132 +-A limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 -A limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-133 +-A limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-132 -A limit-376 -j ACCEPT --A limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-135 +-A limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-134 -A limit-378 -m limit --limit 1/second -j LOG -A limit-378 -j ACCEPT --A limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-136 +-A limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-135 -A limit-379 -m limit --limit 1/second -j LOG --A limit-38 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-39 +-A limit-38 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-38 -A limit-38 -m limit --limit 1/second -j LOG -A limit-38 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-137 +-A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-136 -A limit-380 -j ACCEPT --A limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 +-A limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-138 -A limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 +-A limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 -A limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 +-A limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 -A limit-384 -m limit --limit 1/second -j LOG -A limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 +-A limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 -A limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 +-A limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 -A limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-144 +-A limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 -A limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 +-A limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-144 -A limit-388 -j ACCEPT --A limit-39 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-40 +-A limit-39 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-39 -A limit-39 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 +-A limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 -A limit-390 -m limit --limit 1/second -j LOG -A limit-390 -j ACCEPT --A limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 +-A limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 -A limit-391 -m limit --limit 1/second -j LOG --A limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 +-A limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 -A limit-392 -j ACCEPT --A limit-394 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 +-A limit-394 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-150 -A limit-394 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-395 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 +-A limit-395 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 -A limit-395 -m recent --name user:C --rsource --mask fe00:: --set --A limit-396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 +-A limit-396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 -A limit-396 -m limit --limit 1/second -j LOG -A limit-396 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 +-A limit-397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 -A limit-397 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 +-A limit-398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 -A limit-398 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-156 +-A limit-399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 -A limit-399 -m recent --name user:C --rsource --mask fe00:: --set --A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 +-A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 -A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-40 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-41 +-A limit-40 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-40 -A limit-40 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-400 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-157 +-A limit-400 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-156 -A limit-400 -j ACCEPT --A limit-402 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-159 +-A limit-402 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-158 -A limit-402 -m limit --limit 1/second -j LOG -A limit-402 -j ACCEPT --A limit-403 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 +-A limit-403 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-159 -A limit-403 -m limit --limit 1/second -j LOG --A limit-404 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 +-A limit-404 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 -A limit-404 -j ACCEPT --A limit-406 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-163 +-A limit-406 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-162 -A limit-406 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-407 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-164 +-A limit-407 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-163 -A limit-407 -m recent --name user:C --rdest --mask fe00:: --set --A limit-408 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-165 +-A limit-408 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-164 -A limit-408 -m limit --limit 1/second -j LOG -A limit-408 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-409 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-166 +-A limit-409 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-165 -A limit-409 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-41 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-42 +-A limit-41 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-41 -A limit-41 -m recent --name user:C --rsource --mask fe00:: --set --A limit-410 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-167 +-A limit-410 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-166 -A limit-410 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-411 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-168 +-A limit-411 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-167 -A limit-411 -m recent --name user:C --rdest --mask fe00:: --set --A limit-412 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 +-A limit-412 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-168 -A limit-412 -j ACCEPT --A limit-414 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-171 +-A limit-414 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-170 -A limit-414 -m limit --limit 1/second -j LOG -A limit-414 -j ACCEPT --A limit-415 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-172 +-A limit-415 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-171 -A limit-415 -m limit --limit 1/second -j LOG --A limit-416 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-173 +-A limit-416 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-172 -A limit-416 -j ACCEPT -A limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-42 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-43 +-A limit-42 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-42 -A limit-42 -j ACCEPT -A limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-420 -m limit --limit 1/second -j LOG @@ -6897,7 +6810,7 @@ -A limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-43 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 +-A limit-43 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-43 -A limit-430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-430 -j ACCEPT -A limit-432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP @@ -6916,7 +6829,7 @@ -A limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-44 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-45 +-A limit-44 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 -A limit-44 -m limit --limit 1/second -j LOG -A limit-44 -j ACCEPT -A limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP @@ -6936,7 +6849,7 @@ -A limit-448 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-449 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-449 -m recent --name user:C --rsource --mask fe00:: --set --A limit-45 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-46 +-A limit-45 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-45 -A limit-45 -m limit --limit 1/second -j LOG -A limit-450 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-450 -m limit --limit 1/second -j LOG @@ -6956,7 +6869,7 @@ -A limit-457 -m limit --limit 1/second -j LOG -A limit-458 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-458 -j ACCEPT --A limit-46 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-47 +-A limit-46 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-46 -A limit-46 -j ACCEPT -A limit-460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-460 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT @@ -6978,7 +6891,7 @@ -A limit-468 -j ACCEPT -A limit-469 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-469 -m limit --limit 1/second -j LOG --A limit-47 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-48 +-A limit-47 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-47 -A limit-470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-470 -j ACCEPT -A limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP @@ -6998,7 +6911,7 @@ -A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-48 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 +-A limit-48 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-48 -A limit-48 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-480 -m limit --limit 1/second -j LOG @@ -7018,7 +6931,7 @@ -A limit-487 -m limit --limit 1/second -j LOG -A limit-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-488 -j ACCEPT --A limit-49 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-49 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 -A limit-49 -m recent --name user:C --rdest --mask fe00:: --set -A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -7040,9 +6953,9 @@ -A limit-498 -j ACCEPT -A limit-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-499 -m limit --limit 1/second -j LOG --A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 +-A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 -A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-50 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 +-A limit-50 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 -A limit-50 -m limit --limit 1/second -j LOG -A limit-50 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP @@ -7062,7 +6975,7 @@ -A limit-507 -m recent --name user:C --rsource --mask fe00:: --set -A limit-508 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-508 -j ACCEPT --A limit-51 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 +-A limit-51 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 -A limit-51 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-510 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-510 -m limit --limit 1/second -j LOG @@ -7084,7 +6997,7 @@ -A limit-518 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-519 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-519 -m recent --name user:C --rdest --mask fe00:: --set --A limit-52 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 +-A limit-52 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 -A limit-52 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-520 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-520 -j ACCEPT @@ -7095,118 +7008,118 @@ -A limit-523 -m limit --limit 1/second -j LOG -A limit-524 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-524 -j ACCEPT --A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 +-A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-174 -A limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 +-A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 -A limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 +-A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 -A limit-528 -m limit --limit 1/second -j LOG -A limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 +-A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 -A limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-53 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-54 +-A limit-53 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 -A limit-53 -m recent --name user:C --rdest --mask fe00:: --set --A limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 +-A limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 -A limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 +-A limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 -A limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 +-A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 -A limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 +-A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 -A limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 +-A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 -A limit-534 -m limit --limit 1/second -j LOG -A limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-184 +-A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 -A limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-185 +-A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-184 -A limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-186 +-A limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-185 -A limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 +-A limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-186 -A limit-538 -j ACCEPT --A limit-54 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-54 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-54 -A limit-54 -j ACCEPT --A limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 +-A limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 -A limit-540 -m limit --limit 1/second -j LOG -A limit-540 -j ACCEPT --A limit-541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 +-A limit-541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 -A limit-541 -m limit --limit 1/second -j LOG --A limit-542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 +-A limit-542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 -A limit-542 -j ACCEPT --A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-193 +-A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-192 -A limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-194 +-A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-193 -A limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-195 +-A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-194 -A limit-546 -m limit --limit 1/second -j LOG -A limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-196 +-A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-195 -A limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-197 +-A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-196 -A limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-198 +-A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-197 -A limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-55 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 --A limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-199 +-A limit-55 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-198 -A limit-550 -j ACCEPT --A limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-201 +-A limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-200 -A limit-552 -m limit --limit 1/second -j LOG -A limit-552 -j ACCEPT --A limit-553 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-202 +-A limit-553 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-201 -A limit-553 -m limit --limit 1/second -j LOG --A limit-554 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-203 +-A limit-554 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-202 -A limit-554 -j ACCEPT --A limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-205 +-A limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-204 -A limit-556 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-206 +-A limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-205 -A limit-557 -m recent --name user:C --rsource --mask fe00:: --set --A limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-207 +-A limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-206 -A limit-558 -m limit --limit 1/second -j LOG -A limit-558 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 +-A limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-207 -A limit-559 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-56 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 +-A limit-56 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 -A limit-56 -m limit --limit 1/second -j LOG -A limit-56 -j ACCEPT --A limit-560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 +-A limit-560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 -A limit-560 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-210 +-A limit-561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 -A limit-561 -m recent --name user:C --rsource --mask fe00:: --set --A limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-211 +-A limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-210 -A limit-562 -j ACCEPT --A limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-213 +-A limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-212 -A limit-564 -m limit --limit 1/second -j LOG -A limit-564 -j ACCEPT --A limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-214 +-A limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-213 -A limit-565 -m limit --limit 1/second -j LOG --A limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-215 +-A limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-214 -A limit-566 -j ACCEPT --A limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-217 +-A limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-216 -A limit-568 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-218 +-A limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-217 -A limit-569 -m recent --name user:C --rdest --mask fe00:: --set --A limit-57 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 +-A limit-57 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 -A limit-57 -m limit --limit 1/second -j LOG --A limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-219 +-A limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-218 -A limit-570 -m limit --limit 1/second -j LOG -A limit-570 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-220 +-A limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-219 -A limit-571 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-221 +-A limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-220 -A limit-572 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-222 +-A limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-221 -A limit-573 -m recent --name user:C --rdest --mask fe00:: --set --A limit-574 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 +-A limit-574 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-222 -A limit-574 -j ACCEPT --A limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-225 +-A limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-224 -A limit-576 -m limit --limit 1/second -j LOG -A limit-576 -j ACCEPT --A limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-226 +-A limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-225 -A limit-577 -m limit --limit 1/second -j LOG --A limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-227 +-A limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-226 -A limit-578 -j ACCEPT --A limit-58 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 +-A limit-58 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 -A limit-58 -j ACCEPT -A limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -7230,7 +7143,7 @@ -A limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-59 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60 +-A limit-59 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 -A limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP @@ -7248,7 +7161,7 @@ -A limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 +-A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 -A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -7441,7 +7354,7 @@ -A limit-689 -j DROP -A limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-690 -j logaccept-70 +-A limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-690 -j logaccept-7 -A limit-690 -m limit --limit 1/second -j LOG -A limit-690 -j DROP -A limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-691 -j ACCEPT @@ -7453,7 +7366,7 @@ -A limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-693 -j RETURN -A limit-693 -m limit --limit 1/second -j LOG -A limit-693 -j DROP --A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-694 -j logaccept-71 +-A limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-694 -j logaccept-8 -A limit-694 -m limit --limit 1/second -j LOG -A limit-694 -j DROP -A limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-695 -j ACCEPT @@ -7463,11 +7376,11 @@ -A limit-696 -j DROP -A limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-697 -j RETURN -A limit-697 -j DROP --A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-698 -j logaccept-72 +-A limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-698 -j logaccept-9 -A limit-698 -j DROP -A limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-699 -j ACCEPT -A limit-699 -j DROP --A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 +-A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 -A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT @@ -7475,7 +7388,7 @@ -A limit-700 -j DROP -A limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-701 -j RETURN -A limit-701 -j DROP --A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-702 -j logaccept-73 +-A limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-702 -j logaccept-10 -A limit-702 -j DROP -A limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-703 -j ACCEPT -A limit-703 -j DROP @@ -7485,7 +7398,7 @@ -A limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-705 -j RETURN -A limit-705 -m limit --limit 1/second -j LOG -A limit-705 -j DROP --A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-706 -j logaccept-74 +-A limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-706 -j logaccept-11 -A limit-706 -m limit --limit 1/second -j LOG -A limit-706 -j DROP -A limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-707 -j ACCEPT @@ -7497,7 +7410,7 @@ -A limit-709 -j DROP -A limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-710 -j logaccept-75 +-A limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-710 -j logaccept-12 -A limit-710 -j DROP -A limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-711 -j ACCEPT -A limit-711 -j DROP @@ -7505,121 +7418,121 @@ -A limit-712 -j DROP -A limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-713 -j RETURN -A limit-713 -j DROP --A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-714 -j logaccept-76 +-A limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-714 -j logaccept-13 -A limit-714 -j DROP -A limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-715 -j ACCEPT -A limit-715 -j DROP --A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 +-A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-228 -A limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-230 +-A limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 -A limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-231 +-A limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-230 -A limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-232 +-A limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-231 -A limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-72 -j ACCEPT --A limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-233 +-A limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-232 -A limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-234 +-A limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-233 -A limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-235 +-A limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-234 -A limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-236 +-A limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-235 -A limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-237 +-A limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-236 -A limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-238 +-A limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-237 -A limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-239 +-A limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-238 -A limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-240 +-A limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-239 -A limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-241 +-A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-240 -A limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-242 +-A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-241 -A limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-73 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-243 +-A limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-242 -A limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-244 +-A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-243 -A limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-245 +-A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-244 -A limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-245 -A limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-247 --A limit-735 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 --A limit-736 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-249 --A limit-737 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-246 +-A limit-735 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-247 +-A limit-736 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 +-A limit-737 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-249 -A limit-737 -m limit --limit 1/second -j LOG --A limit-738 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-251 --A limit-739 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-252 +-A limit-738 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-250 +-A limit-739 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-251 -A limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-74 -m limit --limit 1/second -j LOG -A limit-74 -j ACCEPT --A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-253 +-A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-252 -A limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-254 +-A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-253 -A limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-255 +-A limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-254 -A limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-256 +-A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-255 -A limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-257 +-A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-256 -A limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-258 +-A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-257 -A limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-259 --A limit-747 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 --A limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-261 --A limit-749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-262 +-A limit-746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-258 +-A limit-747 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-259 +-A limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 +-A limit-749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-261 -A limit-749 -m limit --limit 1/second -j LOG -A limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-75 -m limit --limit 1/second -j LOG --A limit-750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-263 --A limit-751 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-264 --A limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 +-A limit-750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-262 +-A limit-751 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-263 +-A limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-264 -A limit-752 -m recent --name user:C --rsource --mask fe00:: --set --A limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 +-A limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 -A limit-753 -m recent --name user:C --rsource --mask fe00:: --set --A limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 +-A limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 -A limit-754 -m recent --name user:C --rsource --mask fe00:: --set --A limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 +-A limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 -A limit-755 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 +-A limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 -A limit-756 -m recent --name user:C --rsource --mask fe00:: --set --A limit-757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 -A limit-757 -m recent --name user:C --rsource --mask fe00:: --set --A limit-758 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 --A limit-759 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A limit-758 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-270 +-A limit-759 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 -A limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-76 -j ACCEPT --A limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 --A limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 +-A limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 -A limit-761 -m limit --limit 1/second -j LOG --A limit-762 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 --A limit-763 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-276 --A limit-764 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-277 +-A limit-762 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 +-A limit-763 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 +-A limit-764 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-276 -A limit-764 -m recent --name user:C --rdest --mask fe00:: --set --A limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-278 +-A limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-277 -A limit-765 -m recent --name user:C --rdest --mask fe00:: --set --A limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-279 +-A limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-278 -A limit-766 -m recent --name user:C --rdest --mask fe00:: --set --A limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-280 +-A limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-279 -A limit-767 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-281 +-A limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-280 -A limit-768 -m recent --name user:C --rdest --mask fe00:: --set --A limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-282 +-A limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-281 -A limit-769 -m recent --name user:C --rdest --mask fe00:: --set -A limit-77 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-283 --A limit-771 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284 --A limit-772 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-285 --A limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-286 +-A limit-770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-282 +-A limit-771 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-283 +-A limit-772 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284 +-A limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-285 -A limit-773 -m limit --limit 1/second -j LOG --A limit-774 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-287 --A limit-775 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-288 +-A limit-774 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-286 +-A limit-775 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-287 -A limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP @@ -7667,7 +7580,7 @@ -A limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 +-A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 -A limit-8 -m limit --limit 1/second -j LOG -A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP @@ -7822,106 +7735,106 @@ -A limit-881 -m limit --limit 1/second -j LOG -A limit-882 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-883 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 +-A limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-288 -A limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 +-A limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 -A limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 +-A limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 -A limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 +-A limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 -A limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 +-A limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 -A limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 +-A limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 -A limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-89 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 +-A limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 -A limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 +-A limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 -A limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 +-A limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 -A limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 +-A limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 -A limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 +-A limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 -A limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 -A limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-896 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 --A limit-897 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 --A limit-898 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 --A limit-899 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-896 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-300 +-A limit-897 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 +-A limit-898 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 +-A limit-899 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 -A limit-899 -m limit --limit 1/second -j LOG --A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 +-A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 -A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-90 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-90 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-900 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 --A limit-901 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-306 --A limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-307 +-A limit-900 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 +-A limit-901 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 +-A limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-306 -A limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-308 +-A limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-307 -A limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-309 +-A limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-308 -A limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 +-A limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-309 -A limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 +-A limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 -A limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 -A limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-908 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-313 --A limit-909 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-314 +-A limit-908 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-312 +-A limit-909 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-313 -A limit-91 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-91 -m recent --name user:C --rsource --mask fe00:: --set --A limit-910 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-315 --A limit-911 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-910 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-314 +-A limit-911 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-315 -A limit-911 -m limit --limit 1/second -j LOG --A limit-912 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-317 --A limit-913 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-318 --A limit-914 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-319 +-A limit-912 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-316 +-A limit-913 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-317 +-A limit-914 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-318 -A limit-914 -m recent --name user:C --rsource --mask fe00:: --set --A limit-915 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-320 +-A limit-915 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-319 -A limit-915 -m recent --name user:C --rsource --mask fe00:: --set --A limit-916 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-321 +-A limit-916 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-320 -A limit-916 -m recent --name user:C --rsource --mask fe00:: --set --A limit-917 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-322 +-A limit-917 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-321 -A limit-917 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-918 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-323 +-A limit-918 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-322 -A limit-918 -m recent --name user:C --rsource --mask fe00:: --set --A limit-919 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-919 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-323 -A limit-919 -m recent --name user:C --rsource --mask fe00:: --set -A limit-92 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-92 -m limit --limit 1/second -j LOG -A limit-92 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT --A limit-920 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-325 --A limit-921 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-326 --A limit-922 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-327 --A limit-923 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-920 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-324 +-A limit-921 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-325 +-A limit-922 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-326 +-A limit-923 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-327 -A limit-923 -m limit --limit 1/second -j LOG --A limit-924 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-329 --A limit-925 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-330 --A limit-926 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 +-A limit-924 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-328 +-A limit-925 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-329 +-A limit-926 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-330 -A limit-926 -m recent --name user:C --rdest --mask fe00:: --set --A limit-927 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 +-A limit-927 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 -A limit-927 -m recent --name user:C --rdest --mask fe00:: --set --A limit-928 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 +-A limit-928 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 -A limit-928 -m recent --name user:C --rdest --mask fe00:: --set --A limit-929 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 +-A limit-929 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 -A limit-929 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-93 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-93 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG --A limit-930 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 +-A limit-930 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 -A limit-930 -m recent --name user:C --rdest --mask fe00:: --set --A limit-931 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-931 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 -A limit-931 -m recent --name user:C --rdest --mask fe00:: --set --A limit-932 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-337 --A limit-933 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-338 --A limit-934 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-339 --A limit-935 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-932 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-336 +-A limit-933 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-337 +-A limit-934 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-338 +-A limit-935 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-339 -A limit-935 -m limit --limit 1/second -j LOG --A limit-936 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 --A limit-937 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-342 +-A limit-936 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 +-A limit-937 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 -A limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP @@ -8040,58 +7953,46 @@ -A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT +-A logaccept-1 -m limit --limit 1/second -j LOG +-A logaccept-1 -j ACCEPT +-A logaccept-10 -m limit --limit 1/second -j LOG +-A logaccept-10 -j ACCEPT +-A logaccept-11 -m limit --limit 1/second -j LOG +-A logaccept-11 -j ACCEPT +-A logaccept-12 -m limit --limit 1/second -j LOG +-A logaccept-12 -j ACCEPT +-A logaccept-13 -m limit --limit 1/second -j LOG +-A logaccept-13 -j ACCEPT +-A logaccept-14 -m limit --limit 1/second -j LOG +-A logaccept-14 -j ACCEPT +-A logaccept-15 -m limit --limit 1/second -j LOG +-A logaccept-15 -j ACCEPT +-A logaccept-16 -m limit --limit 1/second -j LOG +-A logaccept-16 -j ACCEPT +-A logaccept-17 -m limit --limit 1/second -j LOG +-A logaccept-17 -j ACCEPT -A logaccept-18 -m limit --limit 1/second -j LOG -A logaccept-18 -j ACCEPT --A logaccept-27 -m limit --limit 1/second -j LOG --A logaccept-27 -j ACCEPT --A logaccept-36 -m limit --limit 1/second -j LOG --A logaccept-36 -j ACCEPT --A logaccept-45 -m limit --limit 1/second -j LOG --A logaccept-45 -j ACCEPT --A logaccept-63 -m limit --limit 1/second -j LOG --A logaccept-63 -j ACCEPT --A logaccept-64 -m limit --limit 1/second -j LOG --A logaccept-64 -j ACCEPT --A logaccept-65 -m limit --limit 1/second -j LOG --A logaccept-65 -j ACCEPT --A logaccept-66 -m limit --limit 1/second -j LOG --A logaccept-66 -j ACCEPT --A logaccept-67 -m limit --limit 1/second -j LOG --A logaccept-67 -j ACCEPT --A logaccept-68 -m limit --limit 1/second -j LOG --A logaccept-68 -j ACCEPT --A logaccept-69 -m limit --limit 1/second -j LOG --A logaccept-69 -j ACCEPT --A logaccept-70 -m limit --limit 1/second -j LOG --A logaccept-70 -j ACCEPT --A logaccept-71 -m limit --limit 1/second -j LOG --A logaccept-71 -j ACCEPT --A logaccept-72 -m limit --limit 1/second -j LOG --A logaccept-72 -j ACCEPT --A logaccept-73 -m limit --limit 1/second -j LOG --A logaccept-73 -j ACCEPT --A logaccept-74 -m limit --limit 1/second -j LOG --A logaccept-74 -j ACCEPT --A logaccept-75 -m limit --limit 1/second -j LOG --A logaccept-75 -j ACCEPT --A logaccept-76 -m limit --limit 1/second -j LOG --A logaccept-76 -j ACCEPT --A logaccept-77 -m limit --limit 1/second -j LOG --A logaccept-77 -j ACCEPT --A logaccept-78 -m limit --limit 1/second -j LOG --A logaccept-78 -j ACCEPT --A logaccept-79 -m limit --limit 1/second -j LOG --A logaccept-79 -j ACCEPT --A logaccept-80 -m limit --limit 1/second -j LOG --A logaccept-80 -j ACCEPT --A logaccept-81 -m limit --limit 1/second -j LOG --A logaccept-81 -j ACCEPT --A logaccept-82 -m limit --limit 1/second -j LOG --A logaccept-82 -j ACCEPT --A logaccept-83 -m limit --limit 1/second -j LOG --A logaccept-83 -j ACCEPT --A logaccept-84 -m limit --limit 1/second -j LOG --A logaccept-84 -j ACCEPT +-A logaccept-19 -m limit --limit 1/second -j LOG +-A logaccept-19 -j ACCEPT +-A logaccept-2 -m limit --limit 1/second -j LOG +-A logaccept-2 -j ACCEPT +-A logaccept-20 -m limit --limit 1/second -j LOG +-A logaccept-20 -j ACCEPT +-A logaccept-21 -m limit --limit 1/second -j LOG +-A logaccept-21 -j ACCEPT +-A logaccept-3 -m limit --limit 1/second -j LOG +-A logaccept-3 -j ACCEPT +-A logaccept-4 -m limit --limit 1/second -j LOG +-A logaccept-4 -j ACCEPT +-A logaccept-5 -m limit --limit 1/second -j LOG +-A logaccept-5 -j ACCEPT +-A logaccept-6 -m limit --limit 1/second -j LOG +-A logaccept-6 -j ACCEPT +-A logaccept-7 -m limit --limit 1/second -j LOG +-A logaccept-7 -j ACCEPT +-A logaccept-8 -m limit --limit 1/second -j LOG +-A logaccept-8 -j ACCEPT -A logaccept-9 -m limit --limit 1/second -j LOG -A logaccept-9 -j ACCEPT -A logaccept-final-0 -m limit --limit 1/second -j LOG @@ -9016,8 +8917,6 @@ -A logdrop-456 -j DROP -A logdrop-457 -m limit --limit 1/second -j LOG -A logdrop-457 -j DROP --A logdrop-458 -m limit --limit 1/second -j LOG --A logdrop-458 -j DROP -A logdrop-46 -m limit --limit 1/second -j LOG -A logdrop-46 -j DROP -A logdrop-47 -m limit --limit 1/second -j LOG @@ -9137,17 +9036,6 @@ -A logdrop-99 -m limit --limit 1/second -j LOG -A logdrop-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG --A logpass-16 -m limit --limit 1/second -j LOG --A logpass-30 -m limit --limit 1/second -j LOG --A logpass-37 -m limit --limit 1/second -j LOG --A logpass-50 -m limit --limit 1/second -j LOG --A logpass-9 -m limit --limit 1/second -j LOG --A logreject-0 -m limit --limit 1/second -j LOG --A logreject-0 -j REJECT --A logtarpit-0 -m limit --limit 1/second -j LOG --A logtarpit-0 -j tarpit --A tarpit -p tcp -j TARPIT --A tarpit -j DROP COMMIT *mangle :INPUT ACCEPT [0:0] @@ -9162,7 +9050,6 @@ COMMIT *raw :OUTPUT ACCEPT [0:0] :PREROUTING ACCEPT [0:0] --A OUTPUT -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack @@ -9349,11 +9236,7 @@ COMMIT -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack --A OUTPUT -p tcp --dport 80 -j CT --notrack --A OUTPUT -p esp -j CT --notrack --A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack -A OUTPUT -j CT --notrack --A PREROUTING -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -9712,9 +9595,6 @@ COMMIT -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack --A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack -A PREROUTING -i eth0 -j CT --notrack -A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack diff --git a/test/output/filter/dump b/test/output/filter/dump new file mode 100644 index 0000000..b05066f --- /dev/null +++ b/test/output/filter/dump @@ -0,0 +1,896 @@ +Dnat 1 {"in":["_fw","A"]} +(zone) + inet/nat/OUTPUT -j REDIRECT + inet/nat/PREROUTING -i eth0 -j REDIRECT + +Dnat 2 {"in":"B"} +(zone) + inet/nat/PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT + + +Filter 1 {} +(filter) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 2 {"action":"accept"} +(filter) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 3 {"action":"drop"} +(filter) + inet/filter/FORWARD -j logdrop-0 + inet6/filter/FORWARD -j logdrop-0 + inet/filter/INPUT -j logdrop-0 + inet6/filter/INPUT -j logdrop-0 + inet/filter/OUTPUT -j logdrop-0 + inet6/filter/OUTPUT -j logdrop-0 + inet/filter/logdrop-0 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-0 -m limit --limit 1/second -j LOG + inet/filter/logdrop-0 -j DROP + inet6/filter/logdrop-0 -j DROP + +Filter 4 {"action":"pass"} +(filter) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 5 {"action":"reject"} +(filter) + inet/filter/FORWARD -j logreject-0 + inet6/filter/FORWARD -j logreject-0 + inet/filter/INPUT -j logreject-0 + inet6/filter/INPUT -j logreject-0 + inet/filter/OUTPUT -j logreject-0 + inet6/filter/OUTPUT -j logreject-0 + inet/filter/logreject-0 -m limit --limit 1/second -j LOG + inet6/filter/logreject-0 -m limit --limit 1/second -j LOG + inet/filter/logreject-0 -j REJECT + inet6/filter/logreject-0 -j REJECT + +Filter 6 {"action":"tarpit"} +(filter) + inet/filter/FORWARD -j logtarpit-0 + inet6/filter/FORWARD -j logtarpit-0 + inet/filter/INPUT -j logtarpit-0 + inet6/filter/INPUT -j logtarpit-0 + inet/filter/OUTPUT -j logtarpit-0 + inet6/filter/OUTPUT -j logtarpit-0 + inet/filter/logtarpit-0 -m limit --limit 1/second -j LOG + inet6/filter/logtarpit-0 -m limit --limit 1/second -j LOG + inet/filter/logtarpit-0 -j tarpit + inet6/filter/logtarpit-0 -j tarpit + inet/raw/PREROUTING -j CT --notrack + inet6/raw/PREROUTING -j CT --notrack + inet/raw/OUTPUT -j CT --notrack + inet6/raw/OUTPUT -j CT --notrack + +Filter 7 {} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 8 {"action":"drop"} +(log) + inet/filter/FORWARD -j logdrop-1 + inet6/filter/FORWARD -j logdrop-1 + inet/filter/INPUT -j logdrop-1 + inet6/filter/INPUT -j logdrop-1 + inet/filter/OUTPUT -j logdrop-1 + inet6/filter/OUTPUT -j logdrop-1 + inet/filter/logdrop-1 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1 -j DROP + inet6/filter/logdrop-1 -j DROP + +Filter 9 {"action":"pass"} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 10 {"log":false} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 11 {"action":"drop","log":false} +(log) + inet/filter/FORWARD -j DROP + inet6/filter/FORWARD -j DROP + inet/filter/INPUT -j DROP + inet6/filter/INPUT -j DROP + inet/filter/OUTPUT -j DROP + inet6/filter/OUTPUT -j DROP + +Filter 12 {"action":"pass","log":false} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 13 {"log":true} +(log) + inet/filter/FORWARD -j logaccept-0 + inet6/filter/FORWARD -j logaccept-0 + inet/filter/INPUT -j logaccept-0 + inet6/filter/INPUT -j logaccept-0 + inet/filter/OUTPUT -j logaccept-0 + inet6/filter/OUTPUT -j logaccept-0 + inet/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet/filter/logaccept-0 -j ACCEPT + inet6/filter/logaccept-0 -j ACCEPT + +Filter 14 {"action":"drop","log":true} +(log) + inet/filter/FORWARD -j logdrop-2 + inet6/filter/FORWARD -j logdrop-2 + inet/filter/INPUT -j logdrop-2 + inet6/filter/INPUT -j logdrop-2 + inet/filter/OUTPUT -j logdrop-2 + inet6/filter/OUTPUT -j logdrop-2 + inet/filter/logdrop-2 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-2 -m limit --limit 1/second -j LOG + inet/filter/logdrop-2 -j DROP + inet6/filter/logdrop-2 -j DROP + +Filter 15 {"action":"pass","log":true} +(log) + inet/filter/FORWARD -j logpass-0 + inet6/filter/FORWARD -j logpass-0 + inet/filter/INPUT -j logpass-0 + inet6/filter/INPUT -j logpass-0 + inet/filter/OUTPUT -j logpass-0 + inet6/filter/OUTPUT -j logpass-0 + inet/filter/logpass-0 -m limit --limit 1/second -j LOG + inet6/filter/logpass-0 -m limit --limit 1/second -j LOG + +Filter 16 {"log":"none"} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 17 {"action":"drop","log":"none"} +(log) + inet/filter/FORWARD -j DROP + inet6/filter/FORWARD -j DROP + inet/filter/INPUT -j DROP + inet6/filter/INPUT -j DROP + inet/filter/OUTPUT -j DROP + inet6/filter/OUTPUT -j DROP + +Filter 18 {"action":"pass","log":"none"} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 19 {"in":["_fw","A"]} +(zone) + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + inet/filter/FORWARD -i eth0 -j ACCEPT + inet6/filter/FORWARD -i eth0 -j ACCEPT + inet/filter/INPUT -i eth0 -j ACCEPT + inet6/filter/INPUT -i eth0 -j ACCEPT + +Filter 20 {"in":"B","out":"C"} +(zone) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + +Filter 21 {"out":["_fw","B"]} +(zone) + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT + +Filter 22 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} +(zone) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT + + +Ipset awall-masquerade {"family":"inet","type":"hash:net"} +(masquerade) + + +Limit B true +(limit) + +Limit C 7 +(limit) + +Limit D {"inet":22,"inet6":58} +(limit) + + +Log _default {"limit":1} +(defaults) + +Log none {"mode":"none"} +(log) + + +Mark 1 {"in":["_fw","A"],"mark":0} +(zone) + inet/mangle/OUTPUT -j MARK --set-mark 0 + inet6/mangle/OUTPUT -j MARK --set-mark 0 + inet/mangle/PREROUTING -i eth0 -j MARK --set-mark 0 + inet6/mangle/PREROUTING -i eth0 -j MARK --set-mark 0 + +Mark 2 {"in":"B","mark":1,"out":"C"} +(zone) + inet/mangle/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 + inet/mangle/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 + +Mark 3 {"mark":2,"out":["_fw","B"]} +(zone) + inet/mangle/INPUT -j MARK --set-mark 2 + inet6/mangle/INPUT -j MARK --set-mark 2 + inet/mangle/POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 + inet6/mangle/POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 + + +No-track 1 {"in":["_fw","A"]} +(zone) + inet/raw/OUTPUT -j CT --notrack + inet6/raw/OUTPUT -j CT --notrack + inet/raw/PREROUTING -i eth0 -j CT --notrack + inet6/raw/PREROUTING -i eth0 -j CT --notrack + +No-track 2 {"in":"B"} +(zone) + inet/raw/PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack + inet6/raw/PREROUTING -i eth1 -s fc00::/7 -j CT --notrack + +No-track 3 {"out":"_fw"} +(zone) + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack + + +Service babel {"port":6697,"proto":"tcp"} +(services) + +Service bacula-dir {"port":9101,"proto":"tcp"} +(services) + +Service bacula-fd {"port":9102,"proto":"tcp"} +(services) + +Service bacula-sd {"port":9103,"proto":"tcp"} +(services) + +Service bgp {"port":179,"proto":"tcp"} +(services) + +Service dhcp {"family":"inet","port":[67,68],"proto":"udp"} +(services) + +Service discard [{"port":9,"proto":"udp"},{"port":9,"proto":"tcp"}] +(services) + +Service dns [{"port":53,"proto":"udp"},{"port":53,"proto":"tcp"}] +(services) + +Service epmap [{"port":135,"proto":"tcp"},{"port":135,"proto":"udp"}] +(services) + +Service ftp {"ct-helper":"ftp","port":21,"proto":"tcp"} +(services) + +Service gre {"proto":"gre"} +(services) + +Service hp-pdl {"port":9100,"proto":"tcp"} +(services) + +Service http {"port":80,"proto":"tcp"} +(services) + +Service http-alt {"port":8080,"proto":"tcp"} +(services) + +Service https {"port":443,"proto":"tcp"} +(services) + +Service icmp {"proto":"icmp"} +(services) + +Service igmp {"proto":"igmp"} +(services) + +Service imap {"port":143,"proto":"tcp"} +(services) + +Service imaps {"port":993,"proto":"tcp"} +(services) + +Service ipsec [{"proto":"esp"},{"port":[500,4500],"proto":"udp"}] +(services) + +Service irc {"ct-helper":"irc","port":6667,"proto":"tcp"} +(services) + +Service kerberos [{"port":88,"proto":"tcp"},{"port":88,"proto":"udp"}] +(services) + +Service kpasswd [{"port":464,"proto":"tcp"},{"port":464,"proto":"udp"}] +(services) + +Service l2tp {"port":1701,"proto":"udp"} +(services) + +Service ldap [{"port":389,"proto":"tcp"},{"port":389,"proto":"udp"}] +(services) + +Service ldaps [{"port":636,"proto":"tcp"},{"port":636,"proto":"udp"}] +(services) + +Service microsoft-ds [{"port":445,"proto":"tcp"},{"port":445,"proto":"udp"}] +(services) + +Service ms-sql-m {"port":1434,"proto":"tcp"} +(services) + +Service ms-sql-s {"port":1433,"proto":"tcp"} +(services) + +Service msft-gc [{"port":3268,"proto":"tcp"},{"port":3268,"proto":"udp"}] +(services) + +Service msft-gc-ssl [{"port":3269,"proto":"tcp"},{"port":3269,"proto":"udp"}] +(services) + +Service netbios-ds [{"port":138,"proto":"tcp"},{"port":138,"proto":"udp"}] +(services) + +Service netbios-ns [{"family":"inet","port":137,"proto":"tcp"},{"ct-helper":"netbios-ns","family":"inet","port":137,"proto":"udp"}] +(services) + +Service netbios-ssn [{"port":139,"proto":"tcp"},{"port":139,"proto":"udp"}] +(services) + +Service ntp {"port":123,"proto":"udp"} +(services) + +Service ospf {"proto":"ospf"} +(services) + +Service pgsql {"port":5432,"proto":"tcp"} +(services) + +Service ping [{"proto":"icmp","reply-type":0,"type":8},{"proto":"icmpv6","reply-type":129,"type":128}] +(services) + +Service pop3 {"port":110,"proto":"tcp"} +(services) + +Service pop3s {"port":995,"proto":"tcp"} +(services) + +Service radius [{"port":1812,"proto":"udp"},{"port":1812,"proto":"tcp"}] +(services) + +Service radius-acct [{"port":1813,"proto":"udp"},{"port":1813,"proto":"tcp"}] +(services) + +Service rdp {"port":3389,"proto":"tcp"} +(services) + +Service rsync {"port":873,"proto":"tcp"} +(services) + +Service rtmp {"port":1935,"proto":"tcp"} +(services) + +Service rtsp {"port":554,"proto":"tcp"} +(services) + +Service sieve {"port":4190,"proto":"tcp"} +(services) + +Service sip [{"ct-helper":"sip","port":5060,"proto":"udp"},{"ct-helper":"sip","port":5060,"proto":"tcp"}] +(services) + +Service sip-tls [{"port":5061,"proto":"udp"},{"port":5061,"proto":"tcp"}] +(services) + +Service smtp {"port":25,"proto":"tcp"} +(services) + +Service snmp {"port":161,"proto":"udp"} +(services) + +Service snmp-trap {"port":162,"proto":"udp"} +(services) + +Service ssh {"port":22,"proto":"tcp"} +(services) + +Service submission {"port":587,"proto":"tcp"} +(services) + +Service syslog {"port":514,"proto":"udp"} +(services) + +Service telnet {"port":23,"proto":"tcp"} +(services) + +Service teredo {"port":3544,"proto":"udp"} +(services) + +Service tftp {"port":69,"proto":"udp"} +(services) + +Service vnc {"port":5900,"proto":"tcp"} +(services) + + +Snat 1 {"out":["_fw","B"]} +(zone) + inet/nat/INPUT -j MASQUERADE + inet/nat/POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE + + +Variable awall_tproxy_mark 1 +(defaults) + + +Zone A {"iface":"eth0"} +(zone) + +Zone B {"addr":["10.0.0.0\/12","fc00::\/7"],"iface":"eth1"} +(zone) + +Zone C {"addr":"10.1.0.0\/12","iface":["eth2","eth3"]} +(zone) + +Zone D {"iface":["eth4","eth5"],"route-back":true} +(zone) + +Zone E {"ipsec":true} +(zone) + + +# ipset awall-masquerade +hash:net family inet + + +# rules-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logdrop-2 - [0:0] +:logpass-0 - [0:0] +:logreject-0 - [0:0] +:logtarpit-0 - [0:0] +:tarpit - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j logreject-0 +-A FORWARD -j logtarpit-0 +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-1 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logdrop-2 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmp -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j logreject-0 +-A INPUT -j logtarpit-0 +-A INPUT -j ACCEPT +-A INPUT -j logdrop-1 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logdrop-2 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmp -j icmp-routing +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j logreject-0 +-A OUTPUT -j logtarpit-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-1 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logdrop-2 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -p icmp -j icmp-routing +-A icmp-routing -p icmp --icmp-type 3 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 11 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 12 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logdrop-2 -m limit --limit 1/second -j LOG +-A logdrop-2 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +-A logreject-0 -m limit --limit 1/second -j LOG +-A logreject-0 -j REJECT +-A logtarpit-0 -m limit --limit 1/second -j LOG +-A logtarpit-0 -j tarpit +-A tarpit -p tcp -j TARPIT +-A tarpit -j DROP +COMMIT +*mangle +:FORWARD ACCEPT [0:0] +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*nat +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +:awall-masquerade - [0:0] +-A INPUT -j MASQUERADE +-A OUTPUT -j REDIRECT +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE +-A POSTROUTING -m set --match-set awall-masquerade src -j awall-masquerade +-A PREROUTING -i eth0 -j REDIRECT +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT +-A awall-masquerade -m set ! --match-set awall-masquerade dst -j MASQUERADE +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT + +# rules6-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logdrop-2 - [0:0] +:logpass-0 - [0:0] +:logreject-0 - [0:0] +:logtarpit-0 - [0:0] +:tarpit - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j logreject-0 +-A FORWARD -j logtarpit-0 +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-1 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logdrop-2 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j logreject-0 +-A INPUT -j logtarpit-0 +-A INPUT -j ACCEPT +-A INPUT -j logdrop-1 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logdrop-2 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmpv6 -j ACCEPT +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j logreject-0 +-A OUTPUT -j logtarpit-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-1 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logdrop-2 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -p icmpv6 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logdrop-2 -m limit --limit 1/second -j LOG +-A logdrop-2 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +-A logreject-0 -m limit --limit 1/second -j LOG +-A logreject-0 -j REJECT +-A logtarpit-0 -m limit --limit 1/second -j LOG +-A logtarpit-0 -j tarpit +-A tarpit -p tcp -j TARPIT +-A tarpit -j DROP +COMMIT +*mangle +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT + diff --git a/test/output/filter/ipset-awall-masquerade b/test/output/filter/ipset-awall-masquerade new file mode 100644 index 0000000..b3a47fd --- /dev/null +++ b/test/output/filter/ipset-awall-masquerade @@ -0,0 +1,2 @@ +# ipset awall-masquerade +hash:net family inet diff --git a/test/output/filter/rules-save b/test/output/filter/rules-save new file mode 100644 index 0000000..df9ab36 --- /dev/null +++ b/test/output/filter/rules-save @@ -0,0 +1,185 @@ +# rules-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logdrop-2 - [0:0] +:logpass-0 - [0:0] +:logreject-0 - [0:0] +:logtarpit-0 - [0:0] +:tarpit - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j logreject-0 +-A FORWARD -j logtarpit-0 +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-1 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logdrop-2 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmp -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j logreject-0 +-A INPUT -j logtarpit-0 +-A INPUT -j ACCEPT +-A INPUT -j logdrop-1 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logdrop-2 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmp -j icmp-routing +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j logreject-0 +-A OUTPUT -j logtarpit-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-1 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logdrop-2 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -p icmp -j icmp-routing +-A icmp-routing -p icmp --icmp-type 3 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 11 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 12 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logdrop-2 -m limit --limit 1/second -j LOG +-A logdrop-2 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +-A logreject-0 -m limit --limit 1/second -j LOG +-A logreject-0 -j REJECT +-A logtarpit-0 -m limit --limit 1/second -j LOG +-A logtarpit-0 -j tarpit +-A tarpit -p tcp -j TARPIT +-A tarpit -j DROP +COMMIT +*mangle +:FORWARD ACCEPT [0:0] +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*nat +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +:awall-masquerade - [0:0] +-A INPUT -j MASQUERADE +-A OUTPUT -j REDIRECT +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE +-A POSTROUTING -m set --match-set awall-masquerade src -j awall-masquerade +-A PREROUTING -i eth0 -j REDIRECT +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT +-A awall-masquerade -m set ! --match-set awall-masquerade dst -j MASQUERADE +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT diff --git a/test/output/filter/rules6-save b/test/output/filter/rules6-save new file mode 100644 index 0000000..f2149d0 --- /dev/null +++ b/test/output/filter/rules6-save @@ -0,0 +1,145 @@ +# rules6-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logdrop-2 - [0:0] +:logpass-0 - [0:0] +:logreject-0 - [0:0] +:logtarpit-0 - [0:0] +:tarpit - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j logreject-0 +-A FORWARD -j logtarpit-0 +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-1 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logdrop-2 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j logreject-0 +-A INPUT -j logtarpit-0 +-A INPUT -j ACCEPT +-A INPUT -j logdrop-1 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logdrop-2 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmpv6 -j ACCEPT +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j logreject-0 +-A OUTPUT -j logtarpit-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-1 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logdrop-2 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -p icmpv6 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logdrop-2 -m limit --limit 1/second -j LOG +-A logdrop-2 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +-A logreject-0 -m limit --limit 1/second -j LOG +-A logreject-0 -j REJECT +-A logtarpit-0 -m limit --limit 1/second -j LOG +-A logtarpit-0 -j tarpit +-A tarpit -p tcp -j TARPIT +-A tarpit -j DROP +COMMIT +*mangle +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT diff --git a/test/output/no-track/dump b/test/output/no-track/dump new file mode 100644 index 0000000..9079c95 --- /dev/null +++ b/test/output/no-track/dump @@ -0,0 +1,882 @@ +Dnat 1 {"in":["_fw","A"]} +(zone) + inet/nat/OUTPUT -j REDIRECT + inet/nat/PREROUTING -i eth0 -j REDIRECT + +Dnat 2 {"in":"B"} +(zone) + inet/nat/PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT + + +Filter 1 {} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 2 {"action":"drop"} +(log) + inet/filter/FORWARD -j logdrop-0 + inet6/filter/FORWARD -j logdrop-0 + inet/filter/INPUT -j logdrop-0 + inet6/filter/INPUT -j logdrop-0 + inet/filter/OUTPUT -j logdrop-0 + inet6/filter/OUTPUT -j logdrop-0 + inet/filter/logdrop-0 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-0 -m limit --limit 1/second -j LOG + inet/filter/logdrop-0 -j DROP + inet6/filter/logdrop-0 -j DROP + +Filter 3 {"action":"pass"} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 4 {"log":false} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 5 {"action":"drop","log":false} +(log) + inet/filter/FORWARD -j DROP + inet6/filter/FORWARD -j DROP + inet/filter/INPUT -j DROP + inet6/filter/INPUT -j DROP + inet/filter/OUTPUT -j DROP + inet6/filter/OUTPUT -j DROP + +Filter 6 {"action":"pass","log":false} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 7 {"log":true} +(log) + inet/filter/FORWARD -j logaccept-0 + inet6/filter/FORWARD -j logaccept-0 + inet/filter/INPUT -j logaccept-0 + inet6/filter/INPUT -j logaccept-0 + inet/filter/OUTPUT -j logaccept-0 + inet6/filter/OUTPUT -j logaccept-0 + inet/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet/filter/logaccept-0 -j ACCEPT + inet6/filter/logaccept-0 -j ACCEPT + +Filter 8 {"action":"drop","log":true} +(log) + inet/filter/FORWARD -j logdrop-1 + inet6/filter/FORWARD -j logdrop-1 + inet/filter/INPUT -j logdrop-1 + inet6/filter/INPUT -j logdrop-1 + inet/filter/OUTPUT -j logdrop-1 + inet6/filter/OUTPUT -j logdrop-1 + inet/filter/logdrop-1 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-1 -m limit --limit 1/second -j LOG + inet/filter/logdrop-1 -j DROP + inet6/filter/logdrop-1 -j DROP + +Filter 9 {"action":"pass","log":true} +(log) + inet/filter/FORWARD -j logpass-0 + inet6/filter/FORWARD -j logpass-0 + inet/filter/INPUT -j logpass-0 + inet6/filter/INPUT -j logpass-0 + inet/filter/OUTPUT -j logpass-0 + inet6/filter/OUTPUT -j logpass-0 + inet/filter/logpass-0 -m limit --limit 1/second -j LOG + inet6/filter/logpass-0 -m limit --limit 1/second -j LOG + +Filter 10 {"log":"none"} +(log) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 11 {"action":"drop","log":"none"} +(log) + inet/filter/FORWARD -j DROP + inet6/filter/FORWARD -j DROP + inet/filter/INPUT -j DROP + inet6/filter/INPUT -j DROP + inet/filter/OUTPUT -j DROP + inet6/filter/OUTPUT -j DROP + +Filter 12 {"action":"pass","log":"none"} +(log) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 13 {"in":"_fw","no-track":true,"service":"http"} +(no-track) + inet/filter/OUTPUT -p tcp --dport 80 -j ACCEPT + inet6/filter/OUTPUT -p tcp --dport 80 -j ACCEPT + inet/raw/OUTPUT -p tcp --dport 80 -j CT --notrack + inet6/raw/OUTPUT -p tcp --dport 80 -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack + inet/filter/INPUT -p tcp --sport 80 -j ACCEPT + inet6/filter/INPUT -p tcp --sport 80 -j ACCEPT + +Filter 14 {"dest":"172.17.0.0\/16","no-track":true,"service":"radius","src":"172.16.0.0\/16"} +(no-track) + inet/filter/FORWARD -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT + inet/filter/INPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT + inet/filter/FORWARD -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT + inet/filter/INPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT + inet/filter/OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT + inet/filter/OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT + inet/raw/PREROUTING -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack + inet/raw/PREROUTING -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack + inet/raw/OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack + inet/raw/OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack + inet/raw/PREROUTING -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack + inet/raw/PREROUTING -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack + inet/raw/OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack + inet/raw/OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack + inet/filter/FORWARD -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT + inet/filter/INPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT + inet/filter/FORWARD -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT + inet/filter/INPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT + inet/filter/OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT + inet/filter/OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT + +Filter 15 {"dest":"172.18.0.0\/16","no-track":true,"service":"ssh"} +(no-track) + inet/filter/FORWARD -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT + inet/filter/INPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT + inet/filter/OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT + inet/raw/PREROUTING -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack + inet/raw/OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack + inet/raw/PREROUTING -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack + inet/raw/OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack + inet/filter/FORWARD -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT + inet/filter/INPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT + inet/filter/OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT + +Filter 16 {"no-track":true,"out":"_fw","service":"ipsec"} +(no-track) + inet/filter/INPUT -p esp -j ACCEPT + inet6/filter/INPUT -p esp -j ACCEPT + inet/filter/INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT + inet6/filter/INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack + inet/raw/OUTPUT -p esp -j CT --notrack + inet6/raw/OUTPUT -p esp -j CT --notrack + inet/raw/OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack + inet6/raw/OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack + inet/filter/OUTPUT -p esp -j ACCEPT + inet6/filter/OUTPUT -p esp -j ACCEPT + inet/filter/OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT + inet6/filter/OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT + +Filter 17 {"in":["_fw","A"]} +(zone) + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + inet/filter/FORWARD -i eth0 -j ACCEPT + inet6/filter/FORWARD -i eth0 -j ACCEPT + inet/filter/INPUT -i eth0 -j ACCEPT + inet6/filter/INPUT -i eth0 -j ACCEPT + +Filter 18 {"in":"B","out":"C"} +(zone) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + +Filter 19 {"out":["_fw","B"]} +(zone) + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT + +Filter 20 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} +(zone) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth0 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth0 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth4 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth4 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth4 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth4 -j ACCEPT + inet/filter/FORWARD -i eth5 -o eth5 -j ACCEPT + inet6/filter/FORWARD -i eth5 -o eth5 -j ACCEPT + inet/filter/FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT + inet/filter/FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT + inet6/filter/FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT + + +Ipset awall-masquerade {"family":"inet","type":"hash:net"} +(masquerade) + + +Limit B true +(limit) + +Limit C 7 +(limit) + +Limit D {"inet":22,"inet6":58} +(limit) + + +Log _default {"limit":1} +(defaults) + +Log none {"mode":"none"} +(log) + + +Mark 1 {"in":["_fw","A"],"mark":0} +(zone) + inet/mangle/OUTPUT -j MARK --set-mark 0 + inet6/mangle/OUTPUT -j MARK --set-mark 0 + inet/mangle/PREROUTING -i eth0 -j MARK --set-mark 0 + inet6/mangle/PREROUTING -i eth0 -j MARK --set-mark 0 + +Mark 2 {"in":"B","mark":1,"out":"C"} +(zone) + inet/mangle/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 + inet/mangle/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 + +Mark 3 {"mark":2,"out":["_fw","B"]} +(zone) + inet/mangle/INPUT -j MARK --set-mark 2 + inet6/mangle/INPUT -j MARK --set-mark 2 + inet/mangle/POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 + inet6/mangle/POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 + + +No-track 1 {"in":["_fw","A"]} +(zone) + inet/raw/OUTPUT -j CT --notrack + inet6/raw/OUTPUT -j CT --notrack + inet/raw/PREROUTING -i eth0 -j CT --notrack + inet6/raw/PREROUTING -i eth0 -j CT --notrack + +No-track 2 {"in":"B"} +(zone) + inet/raw/PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack + inet6/raw/PREROUTING -i eth1 -s fc00::/7 -j CT --notrack + +No-track 3 {"out":"_fw"} +(zone) + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack + + +Service babel {"port":6697,"proto":"tcp"} +(services) + +Service bacula-dir {"port":9101,"proto":"tcp"} +(services) + +Service bacula-fd {"port":9102,"proto":"tcp"} +(services) + +Service bacula-sd {"port":9103,"proto":"tcp"} +(services) + +Service bgp {"port":179,"proto":"tcp"} +(services) + +Service dhcp {"family":"inet","port":[67,68],"proto":"udp"} +(services) + +Service discard [{"port":9,"proto":"udp"},{"port":9,"proto":"tcp"}] +(services) + +Service dns [{"port":53,"proto":"udp"},{"port":53,"proto":"tcp"}] +(services) + +Service epmap [{"port":135,"proto":"tcp"},{"port":135,"proto":"udp"}] +(services) + +Service ftp {"ct-helper":"ftp","port":21,"proto":"tcp"} +(services) + +Service gre {"proto":"gre"} +(services) + +Service hp-pdl {"port":9100,"proto":"tcp"} +(services) + +Service http {"port":80,"proto":"tcp"} +(services) + +Service http-alt {"port":8080,"proto":"tcp"} +(services) + +Service https {"port":443,"proto":"tcp"} +(services) + +Service icmp {"proto":"icmp"} +(services) + +Service igmp {"proto":"igmp"} +(services) + +Service imap {"port":143,"proto":"tcp"} +(services) + +Service imaps {"port":993,"proto":"tcp"} +(services) + +Service ipsec [{"proto":"esp"},{"port":[500,4500],"proto":"udp"}] +(services) + +Service irc {"ct-helper":"irc","port":6667,"proto":"tcp"} +(services) + +Service kerberos [{"port":88,"proto":"tcp"},{"port":88,"proto":"udp"}] +(services) + +Service kpasswd [{"port":464,"proto":"tcp"},{"port":464,"proto":"udp"}] +(services) + +Service l2tp {"port":1701,"proto":"udp"} +(services) + +Service ldap [{"port":389,"proto":"tcp"},{"port":389,"proto":"udp"}] +(services) + +Service ldaps [{"port":636,"proto":"tcp"},{"port":636,"proto":"udp"}] +(services) + +Service microsoft-ds [{"port":445,"proto":"tcp"},{"port":445,"proto":"udp"}] +(services) + +Service ms-sql-m {"port":1434,"proto":"tcp"} +(services) + +Service ms-sql-s {"port":1433,"proto":"tcp"} +(services) + +Service msft-gc [{"port":3268,"proto":"tcp"},{"port":3268,"proto":"udp"}] +(services) + +Service msft-gc-ssl [{"port":3269,"proto":"tcp"},{"port":3269,"proto":"udp"}] +(services) + +Service netbios-ds [{"port":138,"proto":"tcp"},{"port":138,"proto":"udp"}] +(services) + +Service netbios-ns [{"family":"inet","port":137,"proto":"tcp"},{"ct-helper":"netbios-ns","family":"inet","port":137,"proto":"udp"}] +(services) + +Service netbios-ssn [{"port":139,"proto":"tcp"},{"port":139,"proto":"udp"}] +(services) + +Service ntp {"port":123,"proto":"udp"} +(services) + +Service ospf {"proto":"ospf"} +(services) + +Service pgsql {"port":5432,"proto":"tcp"} +(services) + +Service ping [{"proto":"icmp","reply-type":0,"type":8},{"proto":"icmpv6","reply-type":129,"type":128}] +(services) + +Service pop3 {"port":110,"proto":"tcp"} +(services) + +Service pop3s {"port":995,"proto":"tcp"} +(services) + +Service radius [{"port":1812,"proto":"udp"},{"port":1812,"proto":"tcp"}] +(services) + +Service radius-acct [{"port":1813,"proto":"udp"},{"port":1813,"proto":"tcp"}] +(services) + +Service rdp {"port":3389,"proto":"tcp"} +(services) + +Service rsync {"port":873,"proto":"tcp"} +(services) + +Service rtmp {"port":1935,"proto":"tcp"} +(services) + +Service rtsp {"port":554,"proto":"tcp"} +(services) + +Service sieve {"port":4190,"proto":"tcp"} +(services) + +Service sip [{"ct-helper":"sip","port":5060,"proto":"udp"},{"ct-helper":"sip","port":5060,"proto":"tcp"}] +(services) + +Service sip-tls [{"port":5061,"proto":"udp"},{"port":5061,"proto":"tcp"}] +(services) + +Service smtp {"port":25,"proto":"tcp"} +(services) + +Service snmp {"port":161,"proto":"udp"} +(services) + +Service snmp-trap {"port":162,"proto":"udp"} +(services) + +Service ssh {"port":22,"proto":"tcp"} +(services) + +Service submission {"port":587,"proto":"tcp"} +(services) + +Service syslog {"port":514,"proto":"udp"} +(services) + +Service telnet {"port":23,"proto":"tcp"} +(services) + +Service teredo {"port":3544,"proto":"udp"} +(services) + +Service tftp {"port":69,"proto":"udp"} +(services) + +Service vnc {"port":5900,"proto":"tcp"} +(services) + + +Snat 1 {"out":["_fw","B"]} +(zone) + inet/nat/INPUT -j MASQUERADE + inet/nat/POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE + + +Variable awall_tproxy_mark 1 +(defaults) + + +Zone A {"iface":"eth0"} +(zone) + +Zone B {"addr":["10.0.0.0\/12","fc00::\/7"],"iface":"eth1"} +(zone) + +Zone C {"addr":"10.1.0.0\/12","iface":["eth2","eth3"]} +(zone) + +Zone D {"iface":["eth4","eth5"],"route-back":true} +(zone) + +Zone E {"ipsec":true} +(zone) + + +# ipset awall-masquerade +hash:net family inet + + +# rules-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logpass-0 - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logdrop-1 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A FORWARD -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A FORWARD -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A FORWARD -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A FORWARD -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT +-A FORWARD -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmp -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logdrop-1 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -p tcp --sport 80 -j ACCEPT +-A INPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A INPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A INPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A INPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A INPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT +-A INPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT +-A INPUT -p esp -j ACCEPT +-A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmp -j icmp-routing +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logdrop-1 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -p tcp --dport 80 -j ACCEPT +-A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT +-A OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT +-A OUTPUT -p esp -j ACCEPT +-A OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -p icmp -j icmp-routing +-A icmp-routing -p icmp --icmp-type 3 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 11 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 12 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:FORWARD ACCEPT [0:0] +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*nat +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +:awall-masquerade - [0:0] +-A INPUT -j MASQUERADE +-A OUTPUT -j REDIRECT +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE +-A POSTROUTING -m set --match-set awall-masquerade src -j awall-masquerade +-A PREROUTING -i eth0 -j REDIRECT +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT +-A awall-masquerade -m set ! --match-set awall-masquerade dst -j MASQUERADE +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -p tcp --dport 80 -j CT --notrack +-A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack +-A OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack +-A OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack +-A OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack +-A OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack +-A OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack +-A OUTPUT -p esp -j CT --notrack +-A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack +-A PREROUTING -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack +-A PREROUTING -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack +-A PREROUTING -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack +-A PREROUTING -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack +-A PREROUTING -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack +-A PREROUTING -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT + +# rules6-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logpass-0 - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logdrop-1 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logdrop-1 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -p tcp --sport 80 -j ACCEPT +-A INPUT -p esp -j ACCEPT +-A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmpv6 -j ACCEPT +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logdrop-1 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -p tcp --dport 80 -j ACCEPT +-A OUTPUT -p esp -j ACCEPT +-A OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -p icmpv6 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -p tcp --dport 80 -j CT --notrack +-A OUTPUT -p esp -j CT --notrack +-A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT + diff --git a/test/output/no-track/ipset-awall-masquerade b/test/output/no-track/ipset-awall-masquerade new file mode 100644 index 0000000..b3a47fd --- /dev/null +++ b/test/output/no-track/ipset-awall-masquerade @@ -0,0 +1,2 @@ +# ipset awall-masquerade +hash:net family inet diff --git a/test/output/no-track/rules-save b/test/output/no-track/rules-save new file mode 100644 index 0000000..a818873 --- /dev/null +++ b/test/output/no-track/rules-save @@ -0,0 +1,195 @@ +# rules-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logpass-0 - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logdrop-1 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A FORWARD -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A FORWARD -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A FORWARD -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A FORWARD -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT +-A FORWARD -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmp -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logdrop-1 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -p tcp --sport 80 -j ACCEPT +-A INPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A INPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A INPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A INPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A INPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT +-A INPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT +-A INPUT -p esp -j ACCEPT +-A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmp -j icmp-routing +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logdrop-1 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -p tcp --dport 80 -j ACCEPT +-A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT +-A OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT +-A OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT +-A OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT +-A OUTPUT -p esp -j ACCEPT +-A OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -p icmp -j icmp-routing +-A icmp-routing -p icmp --icmp-type 3 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 11 -j ACCEPT +-A icmp-routing -p icmp --icmp-type 12 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:FORWARD ACCEPT [0:0] +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 1 +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*nat +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +:awall-masquerade - [0:0] +-A INPUT -j MASQUERADE +-A OUTPUT -j REDIRECT +-A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE +-A POSTROUTING -m set --match-set awall-masquerade src -j awall-masquerade +-A PREROUTING -i eth0 -j REDIRECT +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT +-A awall-masquerade -m set ! --match-set awall-masquerade dst -j MASQUERADE +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -p tcp --dport 80 -j CT --notrack +-A OUTPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack +-A OUTPUT -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack +-A OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack +-A OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack +-A OUTPUT -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack +-A OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack +-A OUTPUT -p esp -j CT --notrack +-A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack +-A PREROUTING -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack +-A PREROUTING -p udp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j CT --notrack +-A PREROUTING -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack +-A PREROUTING -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j CT --notrack +-A PREROUTING -p tcp --dport 22 -d 172.18.0.0/16 -j CT --notrack +-A PREROUTING -p tcp --sport 22 -s 172.18.0.0/16 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT diff --git a/test/output/no-track/rules6-save b/test/output/no-track/rules6-save new file mode 100644 index 0000000..57e52ed --- /dev/null +++ b/test/output/no-track/rules6-save @@ -0,0 +1,125 @@ +# rules6-save generated by awall +*filter +:FORWARD DROP [0:0] +:INPUT DROP [0:0] +:OUTPUT DROP [0:0] +:icmp-routing - [0:0] +:logaccept-0 - [0:0] +:logdrop-0 - [0:0] +:logdrop-1 - [0:0] +:logpass-0 - [0:0] +-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logdrop-0 +-A FORWARD +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logdrop-1 +-A FORWARD -j logpass-0 +-A FORWARD -j ACCEPT +-A FORWARD -j DROP +-A FORWARD +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth4 -j ACCEPT +-A FORWARD -i eth0 -o eth5 -j ACCEPT +-A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth4 -o eth0 -j ACCEPT +-A FORWARD -i eth5 -o eth0 -j ACCEPT +-A FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth4 -o eth4 -j ACCEPT +-A FORWARD -i eth4 -o eth5 -j ACCEPT +-A FORWARD -i eth5 -o eth4 -j ACCEPT +-A FORWARD -i eth5 -o eth5 -j ACCEPT +-A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT +-A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT +-A FORWARD -p icmpv6 -j icmp-routing +-A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A INPUT -i lo -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logdrop-0 +-A INPUT +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logdrop-1 +-A INPUT -j logpass-0 +-A INPUT -j ACCEPT +-A INPUT -j DROP +-A INPUT +-A INPUT -p tcp --sport 80 -j ACCEPT +-A INPUT -p esp -j ACCEPT +-A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT +-A INPUT -i eth0 -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -p icmpv6 -j ACCEPT +-A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT +-A OUTPUT -o lo -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logdrop-0 +-A OUTPUT +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logdrop-1 +-A OUTPUT -j logpass-0 +-A OUTPUT -j ACCEPT +-A OUTPUT -j DROP +-A OUTPUT +-A OUTPUT -p tcp --dport 80 -j ACCEPT +-A OUTPUT -p esp -j ACCEPT +-A OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -p icmpv6 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT +-A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT +-A logaccept-0 -m limit --limit 1/second -j LOG +-A logaccept-0 -j ACCEPT +-A logdrop-0 -m limit --limit 1/second -j LOG +-A logdrop-0 -j DROP +-A logdrop-1 -m limit --limit 1/second -j LOG +-A logdrop-1 -j DROP +-A logpass-0 -m limit --limit 1/second -j LOG +COMMIT +*mangle +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A INPUT -j MARK --set-mark 2 +-A OUTPUT -j MARK --set-mark 0 +-A POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 2 +-A PREROUTING -i eth0 -j MARK --set-mark 0 +COMMIT +*raw +:OUTPUT ACCEPT [0:0] +:PREROUTING ACCEPT [0:0] +-A OUTPUT -p tcp --dport 80 -j CT --notrack +-A OUTPUT -p esp -j CT --notrack +-A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack +-A OUTPUT -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack +-A PREROUTING -i eth0 -j CT --notrack +-A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack +COMMIT |