diff options
| author | Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi> | 2017-10-11 15:34:12 +0300 |
|---|---|---|
| committer | Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi> | 2017-10-18 13:33:45 +0300 |
| commit | be16233e26bde7d351765c17b516abee5d89e49c (patch) | |
| tree | 5aefa17cae22090e70d4dd75882242f18b841c30 /test | |
| parent | 1e9f63e59586e0111433553e22d461027be5cdf9 (diff) | |
| download | awall-be16233e26bde7d351765c17b516abee5d89e49c.tar.bz2 awall-be16233e26bde7d351765c17b516abee5d89e49c.tar.xz | |
test: address
Diffstat (limited to 'test')
| -rw-r--r-- | test/mandatory/address.lua | 40 | ||||
| -rw-r--r-- | test/output/dump | 6313 | ||||
| -rw-r--r-- | test/output/rules-save | 1525 | ||||
| -rw-r--r-- | test/output/rules6-save | 188 |
4 files changed, 6697 insertions, 1369 deletions
diff --git a/test/mandatory/address.lua b/test/mandatory/address.lua new file mode 100644 index 0000000..8063154 --- /dev/null +++ b/test/mandatory/address.lua @@ -0,0 +1,40 @@ +--[[ +Address match test cases for Alpine Wall +Copyright (C) 2012-2017 Kaarle Ritvanen +See LICENSE file for license details +]]-- + + +util = require('awall.util') +json = require('cjson') + +res = {} + +saddr = '10.0.0.1' +daddr = '172.16.0.0/16' + +for _, izone in ipairs{false, 'A', 'B', {'B', 'C'}} do + for _, ozone in ipairs{false, 'B'} do + for _, src in ipairs{false, saddr, {saddr, '10.0.0.2'}} do + for _, dest in ipairs{false, daddr, {daddr, '172.16.2.0/16'}} do + for _, log in ipairs{false, true} do + for _, action in ipairs{false, 'pass'} do + table.insert( + res, + { + ['in']=izone or nil, + out=ozone or nil, + src=src or nil, + dest=dest or nil, + log=log or nil, + action=action or nil + } + ) + end + end + end + end + end +end + +print(json.encode{filter=res}) diff --git a/test/output/dump b/test/output/dump index 3091f33..7084be7 100644 --- a/test/output/dump +++ b/test/output/dump @@ -9,6 +9,2184 @@ Dnat 2 {"in":"B"} Filter 1 {} +(address) + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 2 {"action":"pass"} +(address) + inet/filter/FORWARD + inet6/filter/FORWARD + inet/filter/INPUT + inet6/filter/INPUT + inet/filter/OUTPUT + inet6/filter/OUTPUT + +Filter 3 {"log":true} +(address) + inet/filter/FORWARD -j logaccept-0 + inet6/filter/FORWARD -j logaccept-0 + inet/filter/INPUT -j logaccept-0 + inet6/filter/INPUT -j logaccept-0 + inet/filter/OUTPUT -j logaccept-0 + inet6/filter/OUTPUT -j logaccept-0 + inet/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet/filter/logaccept-0 -j ACCEPT + inet6/filter/logaccept-0 -j ACCEPT + +Filter 4 {"action":"pass","log":true} +(address) + inet/filter/FORWARD -j logpass-0 + inet6/filter/FORWARD -j logpass-0 + inet/filter/INPUT -j logpass-0 + inet6/filter/INPUT -j logpass-0 + inet/filter/OUTPUT -j logpass-0 + inet6/filter/OUTPUT -j logpass-0 + inet/filter/logpass-0 -m limit --limit 1/second -j LOG + inet6/filter/logpass-0 -m limit --limit 1/second -j LOG + +Filter 5 {"dest":"172.16.0.0\/16"} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -d 172.16.0.0/16 -j ACCEPT + +Filter 6 {"action":"pass","dest":"172.16.0.0\/16"} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 + inet/filter/INPUT -d 172.16.0.0/16 + inet/filter/OUTPUT -d 172.16.0.0/16 + +Filter 7 {"dest":"172.16.0.0\/16","log":true} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 -j logaccept-1 + inet/filter/INPUT -d 172.16.0.0/16 -j logaccept-1 + inet/filter/OUTPUT -d 172.16.0.0/16 -j logaccept-1 + inet/filter/logaccept-1 -m limit --limit 1/second -j LOG + inet/filter/logaccept-1 -j ACCEPT + +Filter 8 {"action":"pass","dest":"172.16.0.0\/16","log":true} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 -j logpass-1 + inet/filter/INPUT -d 172.16.0.0/16 -j logpass-1 + inet/filter/OUTPUT -d 172.16.0.0/16 -j logpass-1 + inet/filter/logpass-1 -m limit --limit 1/second -j LOG + +Filter 9 {"dest":["172.16.0.0\/16","172.16.2.0\/16"]} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -d 172.16.2.0/16 -j ACCEPT + inet/filter/OUTPUT -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -d 172.16.2.0/16 -j ACCEPT + +Filter 10 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"]} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 + inet/filter/INPUT -d 172.16.0.0/16 + inet/filter/FORWARD -d 172.16.2.0/16 + inet/filter/INPUT -d 172.16.2.0/16 + inet/filter/OUTPUT -d 172.16.0.0/16 + inet/filter/OUTPUT -d 172.16.2.0/16 + +Filter 11 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 -j logaccept-2 + inet/filter/INPUT -d 172.16.0.0/16 -j logaccept-2 + inet/filter/FORWARD -d 172.16.2.0/16 -j logaccept-2 + inet/filter/INPUT -d 172.16.2.0/16 -j logaccept-2 + inet/filter/OUTPUT -d 172.16.0.0/16 -j logaccept-2 + inet/filter/OUTPUT -d 172.16.2.0/16 -j logaccept-2 + inet/filter/logaccept-2 -m limit --limit 1/second -j LOG + inet/filter/logaccept-2 -j ACCEPT + +Filter 12 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true} +(address) + inet/filter/FORWARD -d 172.16.0.0/16 -j logpass-2 + inet/filter/INPUT -d 172.16.0.0/16 -j logpass-2 + inet/filter/FORWARD -d 172.16.2.0/16 -j logpass-2 + inet/filter/INPUT -d 172.16.2.0/16 -j logpass-2 + inet/filter/OUTPUT -d 172.16.0.0/16 -j logpass-2 + inet/filter/OUTPUT -d 172.16.2.0/16 -j logpass-2 + inet/filter/logpass-2 -m limit --limit 1/second -j LOG + +Filter 13 {"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -j ACCEPT + +Filter 14 {"action":"pass","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 + inet/filter/INPUT -s 10.0.0.1 + inet/filter/OUTPUT -s 10.0.0.1 + +Filter 15 {"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -j logaccept-3 + inet/filter/INPUT -s 10.0.0.1 -j logaccept-3 + inet/filter/OUTPUT -s 10.0.0.1 -j logaccept-3 + inet/filter/logaccept-3 -m limit --limit 1/second -j LOG + inet/filter/logaccept-3 -j ACCEPT + +Filter 16 {"action":"pass","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -j logpass-3 + inet/filter/INPUT -s 10.0.0.1 -j logpass-3 + inet/filter/OUTPUT -s 10.0.0.1 -j logpass-3 + inet/filter/logpass-3 -m limit --limit 1/second -j LOG + +Filter 17 {"dest":"172.16.0.0\/16","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 18 {"action":"pass","dest":"172.16.0.0\/16","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 19 {"dest":"172.16.0.0\/16","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 + inet/filter/logaccept-4 -m limit --limit 1/second -j LOG + inet/filter/logaccept-4 -j ACCEPT + +Filter 20 {"action":"pass","dest":"172.16.0.0\/16","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 + inet/filter/logpass-4 -m limit --limit 1/second -j LOG + +Filter 21 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 22 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 23 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 + inet/filter/logaccept-5 -m limit --limit 1/second -j LOG + inet/filter/logaccept-5 -j ACCEPT + +Filter 24 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 + inet/filter/logpass-5 -m limit --limit 1/second -j LOG + +Filter 25 {"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -j ACCEPT + inet/filter/FORWARD -s 10.0.0.2 -j ACCEPT + inet/filter/INPUT -s 10.0.0.2 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.2 -j ACCEPT + +Filter 26 {"action":"pass","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 + inet/filter/INPUT -s 10.0.0.1 + inet/filter/FORWARD -s 10.0.0.2 + inet/filter/INPUT -s 10.0.0.2 + inet/filter/OUTPUT -s 10.0.0.1 + inet/filter/OUTPUT -s 10.0.0.2 + +Filter 27 {"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -j logaccept-6 + inet/filter/INPUT -s 10.0.0.1 -j logaccept-6 + inet/filter/FORWARD -s 10.0.0.2 -j logaccept-6 + inet/filter/INPUT -s 10.0.0.2 -j logaccept-6 + inet/filter/OUTPUT -s 10.0.0.1 -j logaccept-6 + inet/filter/OUTPUT -s 10.0.0.2 -j logaccept-6 + inet/filter/logaccept-6 -m limit --limit 1/second -j LOG + inet/filter/logaccept-6 -j ACCEPT + +Filter 28 {"action":"pass","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -j logpass-6 + inet/filter/INPUT -s 10.0.0.1 -j logpass-6 + inet/filter/FORWARD -s 10.0.0.2 -j logpass-6 + inet/filter/INPUT -s 10.0.0.2 -j logpass-6 + inet/filter/OUTPUT -s 10.0.0.1 -j logpass-6 + inet/filter/OUTPUT -s 10.0.0.2 -j logpass-6 + inet/filter/logpass-6 -m limit --limit 1/second -j LOG + +Filter 29 {"dest":"172.16.0.0\/16","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 30 {"action":"pass","dest":"172.16.0.0\/16","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 31 {"dest":"172.16.0.0\/16","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 + inet/filter/logaccept-7 -m limit --limit 1/second -j LOG + inet/filter/logaccept-7 -j ACCEPT + +Filter 32 {"action":"pass","dest":"172.16.0.0\/16","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 + inet/filter/logpass-7 -m limit --limit 1/second -j LOG + +Filter 33 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 34 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 35 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 + inet/filter/logaccept-8 -m limit --limit 1/second -j LOG + inet/filter/logaccept-8 -j ACCEPT + +Filter 36 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 + inet/filter/FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 + inet/filter/INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 + inet/filter/FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 + inet/filter/INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 + inet/filter/OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 + inet/filter/OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 + inet/filter/logpass-8 -m limit --limit 1/second -j LOG + +Filter 37 {"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j ACCEPT + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT + +Filter 38 {"action":"pass","out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 + inet6/filter/FORWARD -o eth1 -d fc00::/7 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 + +Filter 39 {"log":true,"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j logaccept-9 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j logaccept-9 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j logaccept-9 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j logaccept-9 + inet/filter/logaccept-9 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-9 -m limit --limit 1/second -j LOG + inet/filter/logaccept-9 -j ACCEPT + inet6/filter/logaccept-9 -j ACCEPT + +Filter 40 {"action":"pass","log":true,"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG + +Filter 41 {"dest":"172.16.0.0\/16","out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-0 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-0 + inet/filter/address-0 -d 172.16.0.0/16 -j ACCEPT + +Filter 42 {"action":"pass","dest":"172.16.0.0\/16","out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-1 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-1 + inet/filter/address-1 -d 172.16.0.0/16 + +Filter 43 {"dest":"172.16.0.0\/16","log":true,"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-2 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-2 + inet/filter/address-2 -d 172.16.0.0/16 -j logaccept-10 + inet/filter/logaccept-10 -m limit --limit 1/second -j LOG + inet/filter/logaccept-10 -j ACCEPT + +Filter 44 {"action":"pass","dest":"172.16.0.0\/16","log":true,"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-3 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-3 + inet/filter/address-3 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 45 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-4 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-4 + inet/filter/address-4 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-4 -d 172.16.2.0/16 -j ACCEPT + +Filter 46 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-5 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-5 + inet/filter/address-5 -d 172.16.0.0/16 + inet/filter/address-5 -d 172.16.2.0/16 + +Filter 47 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-6 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-6 + inet/filter/address-6 -d 172.16.0.0/16 -j logaccept-11 + inet/filter/address-6 -d 172.16.2.0/16 -j logaccept-11 + inet/filter/logaccept-11 -m limit --limit 1/second -j LOG + inet/filter/logaccept-11 -j ACCEPT + +Filter 48 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-7 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-7 + inet/filter/address-7 -d 172.16.0.0/16 -j logpass-9 + inet/filter/address-7 -d 172.16.2.0/16 -j logpass-9 + inet/filter/logpass-9 -m limit --limit 1/second -j LOG + +Filter 49 {"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT + +Filter 50 {"action":"pass","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 + +Filter 51 {"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 + inet/filter/logaccept-12 -m limit --limit 1/second -j LOG + inet/filter/logaccept-12 -j ACCEPT + +Filter 52 {"action":"pass","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG + +Filter 53 {"dest":"172.16.0.0\/16","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-8 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-8 + inet/filter/address-8 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 54 {"action":"pass","dest":"172.16.0.0\/16","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-9 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-9 + inet/filter/address-9 -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 55 {"dest":"172.16.0.0\/16","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-10 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-10 + inet/filter/address-10 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-13 + inet/filter/logaccept-13 -m limit --limit 1/second -j LOG + inet/filter/logaccept-13 -j ACCEPT + +Filter 56 {"action":"pass","dest":"172.16.0.0\/16","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-11 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-11 + inet/filter/address-11 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 57 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-12 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-12 + inet/filter/address-12 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-12 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 58 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-13 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-13 + inet/filter/address-13 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-13 -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 59 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-14 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-14 + inet/filter/address-14 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-14 + inet/filter/address-14 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-14 + inet/filter/logaccept-14 -m limit --limit 1/second -j LOG + inet/filter/logaccept-14 -j ACCEPT + +Filter 60 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-15 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-15 + inet/filter/address-15 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-10 + inet/filter/address-15 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-10 + inet/filter/logpass-10 -m limit --limit 1/second -j LOG + +Filter 61 {"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT + +Filter 62 {"action":"pass","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 + +Filter 63 {"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 + inet/filter/logaccept-15 -m limit --limit 1/second -j LOG + inet/filter/logaccept-15 -j ACCEPT + +Filter 64 {"action":"pass","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-11 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-11 + inet/filter/logpass-11 -m limit --limit 1/second -j LOG + +Filter 65 {"dest":"172.16.0.0\/16","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-16 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-16 + inet/filter/address-16 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-16 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 66 {"action":"pass","dest":"172.16.0.0\/16","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-17 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-17 + inet/filter/address-17 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-17 -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 67 {"dest":"172.16.0.0\/16","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-18 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-18 + inet/filter/address-18 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-16 + inet/filter/address-18 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-16 + inet/filter/logaccept-16 -m limit --limit 1/second -j LOG + inet/filter/logaccept-16 -j ACCEPT + +Filter 68 {"action":"pass","dest":"172.16.0.0\/16","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-19 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-19 + inet/filter/address-19 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-12 + inet/filter/address-19 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-12 + inet/filter/logpass-12 -m limit --limit 1/second -j LOG + +Filter 69 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-20 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-20 + inet/filter/address-20 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-20 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/address-20 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-20 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 70 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-21 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-21 + inet/filter/address-21 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-21 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/address-21 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/address-21 -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 71 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-22 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-22 + inet/filter/address-22 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-17 + inet/filter/address-22 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-17 + inet/filter/address-22 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-17 + inet/filter/address-22 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-17 + inet/filter/logaccept-17 -m limit --limit 1/second -j LOG + inet/filter/logaccept-17 -j ACCEPT + +Filter 72 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j address-23 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j address-23 + inet/filter/address-23 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-13 + inet/filter/address-23 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-13 + inet/filter/address-23 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-13 + inet/filter/address-23 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-13 + inet/filter/logpass-13 -m limit --limit 1/second -j LOG + +Filter 73 {"in":"A"} +(address) + inet/filter/FORWARD -i eth0 -j ACCEPT + inet6/filter/FORWARD -i eth0 -j ACCEPT + inet/filter/INPUT -i eth0 -j ACCEPT + inet6/filter/INPUT -i eth0 -j ACCEPT + +Filter 74 {"action":"pass","in":"A"} +(address) + inet/filter/FORWARD -i eth0 + inet6/filter/FORWARD -i eth0 + inet/filter/INPUT -i eth0 + inet6/filter/INPUT -i eth0 + +Filter 75 {"in":"A","log":true} +(address) + inet/filter/FORWARD -i eth0 -j logaccept-18 + inet6/filter/FORWARD -i eth0 -j logaccept-18 + inet/filter/INPUT -i eth0 -j logaccept-18 + inet6/filter/INPUT -i eth0 -j logaccept-18 + inet/filter/logaccept-18 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-18 -m limit --limit 1/second -j LOG + inet/filter/logaccept-18 -j ACCEPT + inet6/filter/logaccept-18 -j ACCEPT + +Filter 76 {"action":"pass","in":"A","log":true} +(address) + inet/filter/FORWARD -i eth0 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -i eth0 -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth0 -m limit --limit 1/second -j LOG + +Filter 77 {"dest":"172.16.0.0\/16","in":"A"} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT + +Filter 78 {"action":"pass","dest":"172.16.0.0\/16","in":"A"} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 + +Filter 79 {"dest":"172.16.0.0\/16","in":"A","log":true} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-19 + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-19 + inet/filter/logaccept-19 -m limit --limit 1/second -j LOG + inet/filter/logaccept-19 -j ACCEPT + +Filter 80 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 81 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A"} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -d 172.16.2.0/16 -j ACCEPT + +Filter 82 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A"} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 + inet/filter/INPUT -i eth0 -d 172.16.2.0/16 + +Filter 83 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-20 + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-20 + inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 -j logaccept-20 + inet/filter/INPUT -i eth0 -d 172.16.2.0/16 -j logaccept-20 + inet/filter/logaccept-20 -m limit --limit 1/second -j LOG + inet/filter/logaccept-20 -j ACCEPT + +Filter 84 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true} +(address) + inet/filter/FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-14 + inet/filter/INPUT -i eth0 -d 172.16.0.0/16 -j logpass-14 + inet/filter/FORWARD -i eth0 -d 172.16.2.0/16 -j logpass-14 + inet/filter/INPUT -i eth0 -d 172.16.2.0/16 -j logpass-14 + inet/filter/logpass-14 -m limit --limit 1/second -j LOG + +Filter 85 {"in":"A","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -j ACCEPT + +Filter 86 {"action":"pass","in":"A","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 + inet/filter/INPUT -i eth0 -s 10.0.0.1 + +Filter 87 {"in":"A","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logaccept-21 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logaccept-21 + inet/filter/logaccept-21 -m limit --limit 1/second -j LOG + inet/filter/logaccept-21 -j ACCEPT + +Filter 88 {"action":"pass","in":"A","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -s 10.0.0.1 -m limit --limit 1/second -j LOG + +Filter 89 {"dest":"172.16.0.0\/16","in":"A","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 90 {"action":"pass","dest":"172.16.0.0\/16","in":"A","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 91 {"dest":"172.16.0.0\/16","in":"A","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 + inet/filter/logaccept-22 -m limit --limit 1/second -j LOG + inet/filter/logaccept-22 -j ACCEPT + +Filter 92 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 93 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 94 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 95 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 + inet/filter/logaccept-23 -m limit --limit 1/second -j LOG + inet/filter/logaccept-23 -j ACCEPT + +Filter 96 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-15 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-15 + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-15 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-15 + inet/filter/logpass-15 -m limit --limit 1/second -j LOG + +Filter 97 {"in":"A","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -j ACCEPT + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.2 -j ACCEPT + +Filter 98 {"action":"pass","in":"A","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 + inet/filter/INPUT -i eth0 -s 10.0.0.1 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 + inet/filter/INPUT -i eth0 -s 10.0.0.2 + +Filter 99 {"in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logaccept-24 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logaccept-24 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -j logaccept-24 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -j logaccept-24 + inet/filter/logaccept-24 -m limit --limit 1/second -j LOG + inet/filter/logaccept-24 -j ACCEPT + +Filter 100 {"action":"pass","in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -j logpass-16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -j logpass-16 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -j logpass-16 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -j logpass-16 + inet/filter/logpass-16 -m limit --limit 1/second -j LOG + +Filter 101 {"dest":"172.16.0.0\/16","in":"A","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 102 {"action":"pass","dest":"172.16.0.0\/16","in":"A","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 103 {"dest":"172.16.0.0\/16","in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 + inet/filter/logaccept-25 -m limit --limit 1/second -j LOG + inet/filter/logaccept-25 -j ACCEPT + +Filter 104 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-17 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-17 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-17 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-17 + inet/filter/logpass-17 -m limit --limit 1/second -j LOG + +Filter 105 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 106 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 107 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 + inet/filter/logaccept-26 -m limit --limit 1/second -j LOG + inet/filter/logaccept-26 -j ACCEPT + +Filter 108 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-18 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-18 + inet/filter/FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-18 + inet/filter/INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-18 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-18 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-18 + inet/filter/FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-18 + inet/filter/INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-18 + inet/filter/logpass-18 -m limit --limit 1/second -j LOG + +Filter 109 {"in":"A","out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT + +Filter 110 {"action":"pass","in":"A","out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 + +Filter 111 {"in":"A","log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j logaccept-27 + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j logaccept-27 + inet/filter/logaccept-27 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-27 -m limit --limit 1/second -j LOG + inet/filter/logaccept-27 -j ACCEPT + inet6/filter/logaccept-27 -j ACCEPT + +Filter 112 {"action":"pass","in":"A","log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG + +Filter 113 {"dest":"172.16.0.0\/16","in":"A","out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-24 + inet/filter/address-24 -d 172.16.0.0/16 -j ACCEPT + +Filter 114 {"action":"pass","dest":"172.16.0.0\/16","in":"A","out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-25 + inet/filter/address-25 -d 172.16.0.0/16 + +Filter 115 {"dest":"172.16.0.0\/16","in":"A","log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-26 + inet/filter/address-26 -d 172.16.0.0/16 -j logaccept-28 + inet/filter/logaccept-28 -m limit --limit 1/second -j LOG + inet/filter/logaccept-28 -j ACCEPT + +Filter 116 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-27 + inet/filter/address-27 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 117 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-28 + inet/filter/address-28 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-28 -d 172.16.2.0/16 -j ACCEPT + +Filter 118 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-29 + inet/filter/address-29 -d 172.16.0.0/16 + inet/filter/address-29 -d 172.16.2.0/16 + +Filter 119 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-30 + inet/filter/address-30 -d 172.16.0.0/16 -j logaccept-29 + inet/filter/address-30 -d 172.16.2.0/16 -j logaccept-29 + inet/filter/logaccept-29 -m limit --limit 1/second -j LOG + inet/filter/logaccept-29 -j ACCEPT + +Filter 120 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-31 + inet/filter/address-31 -d 172.16.0.0/16 -j logpass-19 + inet/filter/address-31 -d 172.16.2.0/16 -j logpass-19 + inet/filter/logpass-19 -m limit --limit 1/second -j LOG + +Filter 121 {"in":"A","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT + +Filter 122 {"action":"pass","in":"A","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 + +Filter 123 {"in":"A","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-30 + inet/filter/logaccept-30 -m limit --limit 1/second -j LOG + inet/filter/logaccept-30 -j ACCEPT + +Filter 124 {"action":"pass","in":"A","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG + +Filter 125 {"dest":"172.16.0.0\/16","in":"A","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-32 + inet/filter/address-32 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 126 {"action":"pass","dest":"172.16.0.0\/16","in":"A","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-33 + inet/filter/address-33 -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 127 {"dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-34 + inet/filter/address-34 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-31 + inet/filter/logaccept-31 -m limit --limit 1/second -j LOG + inet/filter/logaccept-31 -j ACCEPT + +Filter 128 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-35 + inet/filter/address-35 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 129 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-36 + inet/filter/address-36 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-36 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 130 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-37 + inet/filter/address-37 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-37 -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 131 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-38 + inet/filter/address-38 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-32 + inet/filter/address-38 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-32 + inet/filter/logaccept-32 -m limit --limit 1/second -j LOG + inet/filter/logaccept-32 -j ACCEPT + +Filter 132 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-39 + inet/filter/address-39 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 + inet/filter/address-39 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-20 + inet/filter/logpass-20 -m limit --limit 1/second -j LOG + +Filter 133 {"in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT + +Filter 134 {"action":"pass","in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 + +Filter 135 {"in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-33 + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-33 + inet/filter/logaccept-33 -m limit --limit 1/second -j LOG + inet/filter/logaccept-33 -j ACCEPT + +Filter 136 {"action":"pass","in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-21 + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-21 + inet/filter/logpass-21 -m limit --limit 1/second -j LOG + +Filter 137 {"dest":"172.16.0.0\/16","in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-40 + inet/filter/address-40 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-40 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 138 {"action":"pass","dest":"172.16.0.0\/16","in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-41 + inet/filter/address-41 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-41 -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 139 {"dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-42 + inet/filter/address-42 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-34 + inet/filter/address-42 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-34 + inet/filter/logaccept-34 -m limit --limit 1/second -j LOG + inet/filter/logaccept-34 -j ACCEPT + +Filter 140 {"action":"pass","dest":"172.16.0.0\/16","in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-43 + inet/filter/address-43 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-22 + inet/filter/address-43 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-22 + inet/filter/logpass-22 -m limit --limit 1/second -j LOG + +Filter 141 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-44 + inet/filter/address-44 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-44 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/address-44 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-44 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 142 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-45 + inet/filter/address-45 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-45 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/address-45 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/address-45 -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 143 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-46 + inet/filter/address-46 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-35 + inet/filter/address-46 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-35 + inet/filter/address-46 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-35 + inet/filter/address-46 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-35 + inet/filter/logaccept-35 -m limit --limit 1/second -j LOG + inet/filter/logaccept-35 -j ACCEPT + +Filter 144 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"A","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-47 + inet/filter/address-47 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 + inet/filter/address-47 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-23 + inet/filter/address-47 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 + inet/filter/address-47 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-23 + inet/filter/logpass-23 -m limit --limit 1/second -j LOG + +Filter 145 {"in":"B"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -j ACCEPT + inet6/filter/INPUT -i eth1 -s fc00::/7 -j ACCEPT + +Filter 146 {"action":"pass","in":"B"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 + inet6/filter/FORWARD -i eth1 -s fc00::/7 + inet6/filter/INPUT -i eth1 -s fc00::/7 + +Filter 147 {"in":"B","log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-36 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-36 + inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logaccept-36 + inet6/filter/INPUT -i eth1 -s fc00::/7 -j logaccept-36 + inet/filter/logaccept-36 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-36 -m limit --limit 1/second -j LOG + inet/filter/logaccept-36 -j ACCEPT + inet6/filter/logaccept-36 -j ACCEPT + +Filter 148 {"action":"pass","in":"B","log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -m limit --limit 1/second -j LOG + inet6/filter/FORWARD -i eth1 -s fc00::/7 -m limit --limit 1/second -j LOG + inet6/filter/INPUT -i eth1 -s fc00::/7 -m limit --limit 1/second -j LOG + +Filter 149 {"dest":"172.16.0.0\/16","in":"B"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + +Filter 150 {"action":"pass","dest":"172.16.0.0\/16","in":"B"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + +Filter 151 {"dest":"172.16.0.0\/16","in":"B","log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 + inet/filter/logaccept-37 -m limit --limit 1/second -j LOG + inet/filter/logaccept-37 -j ACCEPT + +Filter 152 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 153 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT + +Filter 154 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 + +Filter 155 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 + inet/filter/logaccept-38 -m limit --limit 1/second -j LOG + inet/filter/logaccept-38 -j ACCEPT + +Filter 156 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-24 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-24 + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-24 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-24 + inet/filter/logpass-24 -m limit --limit 1/second -j LOG + +Filter 157 {"in":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-48 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-48 + inet/filter/address-48 -s 10.0.0.1 -j ACCEPT + +Filter 158 {"action":"pass","in":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-49 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-49 + inet/filter/address-49 -s 10.0.0.1 + +Filter 159 {"in":"B","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-50 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-50 + inet/filter/address-50 -s 10.0.0.1 -j logaccept-39 + inet/filter/logaccept-39 -m limit --limit 1/second -j LOG + inet/filter/logaccept-39 -j ACCEPT + +Filter 160 {"action":"pass","in":"B","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-51 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-51 + inet/filter/address-51 -s 10.0.0.1 -m limit --limit 1/second -j LOG + +Filter 161 {"dest":"172.16.0.0\/16","in":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-52 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-52 + inet/filter/address-52 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 162 {"action":"pass","dest":"172.16.0.0\/16","in":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-53 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-53 + inet/filter/address-53 -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 163 {"dest":"172.16.0.0\/16","in":"B","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-54 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-54 + inet/filter/address-54 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-40 + inet/filter/logaccept-40 -m limit --limit 1/second -j LOG + inet/filter/logaccept-40 -j ACCEPT + +Filter 164 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-55 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-55 + inet/filter/address-55 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 165 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-56 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-56 + inet/filter/address-56 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-56 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 166 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-57 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-57 + inet/filter/address-57 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-57 -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 167 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-58 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-58 + inet/filter/address-58 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-41 + inet/filter/address-58 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-41 + inet/filter/logaccept-41 -m limit --limit 1/second -j LOG + inet/filter/logaccept-41 -j ACCEPT + +Filter 168 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-59 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-59 + inet/filter/address-59 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-25 + inet/filter/address-59 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-25 + inet/filter/logpass-25 -m limit --limit 1/second -j LOG + +Filter 169 {"in":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-60 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-60 + inet/filter/address-60 -s 10.0.0.1 -j ACCEPT + inet/filter/address-60 -s 10.0.0.2 -j ACCEPT + +Filter 170 {"action":"pass","in":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-61 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-61 + inet/filter/address-61 -s 10.0.0.1 + inet/filter/address-61 -s 10.0.0.2 + +Filter 171 {"in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-62 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-62 + inet/filter/address-62 -s 10.0.0.1 -j logaccept-42 + inet/filter/address-62 -s 10.0.0.2 -j logaccept-42 + inet/filter/logaccept-42 -m limit --limit 1/second -j LOG + inet/filter/logaccept-42 -j ACCEPT + +Filter 172 {"action":"pass","in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-63 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-63 + inet/filter/address-63 -s 10.0.0.1 -j logpass-26 + inet/filter/address-63 -s 10.0.0.2 -j logpass-26 + inet/filter/logpass-26 -m limit --limit 1/second -j LOG + +Filter 173 {"dest":"172.16.0.0\/16","in":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-64 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-64 + inet/filter/address-64 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-64 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 174 {"action":"pass","dest":"172.16.0.0\/16","in":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-65 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-65 + inet/filter/address-65 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-65 -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 175 {"dest":"172.16.0.0\/16","in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-66 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-66 + inet/filter/address-66 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-43 + inet/filter/address-66 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-43 + inet/filter/logaccept-43 -m limit --limit 1/second -j LOG + inet/filter/logaccept-43 -j ACCEPT + +Filter 176 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-67 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-67 + inet/filter/address-67 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-27 + inet/filter/address-67 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-27 + inet/filter/logpass-27 -m limit --limit 1/second -j LOG + +Filter 177 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-68 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-68 + inet/filter/address-68 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-68 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/address-68 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-68 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 178 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-69 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-69 + inet/filter/address-69 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-69 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/address-69 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/address-69 -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 179 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-70 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-70 + inet/filter/address-70 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-44 + inet/filter/address-70 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-44 + inet/filter/address-70 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-44 + inet/filter/address-70 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-44 + inet/filter/logaccept-44 -m limit --limit 1/second -j LOG + inet/filter/logaccept-44 -j ACCEPT + +Filter 180 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-71 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-71 + inet/filter/address-71 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-28 + inet/filter/address-71 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-28 + inet/filter/address-71 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-28 + inet/filter/address-71 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-28 + inet/filter/logpass-28 -m limit --limit 1/second -j LOG + +Filter 181 {"in":"B","out":"B"} +(address) + +Filter 182 {"action":"pass","in":"B","out":"B"} +(address) + +Filter 183 {"in":"B","log":true,"out":"B"} +(address) + +Filter 184 {"action":"pass","in":"B","log":true,"out":"B"} +(address) + +Filter 185 {"dest":"172.16.0.0\/16","in":"B","out":"B"} +(address) + +Filter 186 {"action":"pass","dest":"172.16.0.0\/16","in":"B","out":"B"} +(address) + +Filter 187 {"dest":"172.16.0.0\/16","in":"B","log":true,"out":"B"} +(address) + +Filter 188 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"out":"B"} +(address) + +Filter 189 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B"} +(address) + +Filter 190 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B"} +(address) + +Filter 191 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B"} +(address) + +Filter 192 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B"} +(address) + +Filter 193 {"in":"B","out":"B","src":"10.0.0.1"} +(address) + +Filter 194 {"action":"pass","in":"B","out":"B","src":"10.0.0.1"} +(address) + +Filter 195 {"in":"B","log":true,"out":"B","src":"10.0.0.1"} +(address) + +Filter 196 {"action":"pass","in":"B","log":true,"out":"B","src":"10.0.0.1"} +(address) + +Filter 197 {"dest":"172.16.0.0\/16","in":"B","out":"B","src":"10.0.0.1"} +(address) + +Filter 198 {"action":"pass","dest":"172.16.0.0\/16","in":"B","out":"B","src":"10.0.0.1"} +(address) + +Filter 199 {"dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":"10.0.0.1"} +(address) + +Filter 200 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":"10.0.0.1"} +(address) + +Filter 201 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":"10.0.0.1"} +(address) + +Filter 202 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":"10.0.0.1"} +(address) + +Filter 203 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":"10.0.0.1"} +(address) + +Filter 204 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":"10.0.0.1"} +(address) + +Filter 205 {"in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 206 {"action":"pass","in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 207 {"in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 208 {"action":"pass","in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 209 {"dest":"172.16.0.0\/16","in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 210 {"action":"pass","dest":"172.16.0.0\/16","in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 211 {"dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 212 {"action":"pass","dest":"172.16.0.0\/16","in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 213 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 214 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 215 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 216 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":"B","log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + +Filter 217 {"in":["B","C"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT + inet6/filter/FORWARD -i eth1 -s fc00::/7 -j ACCEPT + inet6/filter/INPUT -i eth1 -s fc00::/7 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j ACCEPT + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j ACCEPT + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j ACCEPT + +Filter 218 {"action":"pass","in":["B","C"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 + inet6/filter/FORWARD -i eth1 -s fc00::/7 + inet6/filter/INPUT -i eth1 -s fc00::/7 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 + +Filter 219 {"in":["B","C"],"log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-45 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-45 + inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logaccept-45 + inet6/filter/INPUT -i eth1 -s fc00::/7 -j logaccept-45 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j logaccept-45 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j logaccept-45 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j logaccept-45 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j logaccept-45 + inet/filter/logaccept-45 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-45 -m limit --limit 1/second -j LOG + inet/filter/logaccept-45 -j ACCEPT + inet6/filter/logaccept-45 -j ACCEPT + +Filter 220 {"action":"pass","in":["B","C"],"log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-29 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j logpass-29 + inet6/filter/FORWARD -i eth1 -s fc00::/7 -j logpass-29 + inet6/filter/INPUT -i eth1 -s fc00::/7 -j logpass-29 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j logpass-29 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j logpass-29 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j logpass-29 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j logpass-29 + inet/filter/logpass-29 -m limit --limit 1/second -j LOG + inet6/filter/logpass-29 -m limit --limit 1/second -j LOG + +Filter 221 {"dest":"172.16.0.0\/16","in":["B","C"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + +Filter 222 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 + +Filter 223 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 + inet/filter/logaccept-46 -m limit --limit 1/second -j LOG + inet/filter/logaccept-46 -j ACCEPT + +Filter 224 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-30 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-30 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-30 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-30 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-30 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-30 + inet/filter/logpass-30 -m limit --limit 1/second -j LOG + +Filter 225 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT + +Filter 226 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 + +Filter 227 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 + inet/filter/logaccept-47 -m limit --limit 1/second -j LOG + inet/filter/logaccept-47 -j ACCEPT + +Filter 228 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-31 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-31 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-31 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-31 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-31 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-31 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-31 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-31 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-31 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-31 + inet/filter/logpass-31 -m limit --limit 1/second -j LOG + +Filter 229 {"in":["B","C"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-72 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-72 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-72 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-72 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-72 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-72 + inet/filter/address-72 -s 10.0.0.1 -j ACCEPT + +Filter 230 {"action":"pass","in":["B","C"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-73 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-73 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-73 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-73 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-73 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-73 + inet/filter/address-73 -s 10.0.0.1 + +Filter 231 {"in":["B","C"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-74 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-74 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-74 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-74 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-74 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-74 + inet/filter/address-74 -s 10.0.0.1 -j logaccept-48 + inet/filter/logaccept-48 -m limit --limit 1/second -j LOG + inet/filter/logaccept-48 -j ACCEPT + +Filter 232 {"action":"pass","in":["B","C"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-75 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-75 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-75 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-75 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-75 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-75 + inet/filter/address-75 -s 10.0.0.1 -m limit --limit 1/second -j LOG + +Filter 233 {"dest":"172.16.0.0\/16","in":["B","C"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-76 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-76 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-76 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-76 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-76 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-76 + inet/filter/address-76 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 234 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-77 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-77 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-77 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-77 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-77 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-77 + inet/filter/address-77 -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 235 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-78 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-78 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-78 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-78 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-78 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-78 + inet/filter/address-78 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-49 + inet/filter/logaccept-49 -m limit --limit 1/second -j LOG + inet/filter/logaccept-49 -j ACCEPT + +Filter 236 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-79 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-79 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-79 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-79 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-79 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-79 + inet/filter/address-79 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 237 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-80 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-80 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-80 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-80 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-80 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-80 + inet/filter/address-80 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-80 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 238 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-81 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-81 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-81 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-81 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-81 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-81 + inet/filter/address-81 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-81 -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 239 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-82 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-82 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-82 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-82 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-82 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-82 + inet/filter/address-82 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-50 + inet/filter/address-82 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-50 + inet/filter/logaccept-50 -m limit --limit 1/second -j LOG + inet/filter/logaccept-50 -j ACCEPT + +Filter 240 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-83 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-83 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-83 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-83 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-83 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-83 + inet/filter/address-83 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-32 + inet/filter/address-83 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-32 + inet/filter/logpass-32 -m limit --limit 1/second -j LOG + +Filter 241 {"in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-84 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-84 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-84 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-84 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-84 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-84 + inet/filter/address-84 -s 10.0.0.1 -j ACCEPT + inet/filter/address-84 -s 10.0.0.2 -j ACCEPT + +Filter 242 {"action":"pass","in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-85 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-85 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-85 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-85 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-85 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-85 + inet/filter/address-85 -s 10.0.0.1 + inet/filter/address-85 -s 10.0.0.2 + +Filter 243 {"in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-86 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-86 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-86 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-86 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-86 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-86 + inet/filter/address-86 -s 10.0.0.1 -j logaccept-51 + inet/filter/address-86 -s 10.0.0.2 -j logaccept-51 + inet/filter/logaccept-51 -m limit --limit 1/second -j LOG + inet/filter/logaccept-51 -j ACCEPT + +Filter 244 {"action":"pass","in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-87 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-87 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-87 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-87 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-87 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-87 + inet/filter/address-87 -s 10.0.0.1 -j logpass-33 + inet/filter/address-87 -s 10.0.0.2 -j logpass-33 + inet/filter/logpass-33 -m limit --limit 1/second -j LOG + +Filter 245 {"dest":"172.16.0.0\/16","in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-88 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-88 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-88 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-88 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-88 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-88 + inet/filter/address-88 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-88 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 246 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-89 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-89 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-89 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-89 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-89 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-89 + inet/filter/address-89 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-89 -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 247 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-90 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-90 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-90 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-90 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-90 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-90 + inet/filter/address-90 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-52 + inet/filter/address-90 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-52 + inet/filter/logaccept-52 -m limit --limit 1/second -j LOG + inet/filter/logaccept-52 -j ACCEPT + +Filter 248 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-91 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-91 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-91 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-91 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-91 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-91 + inet/filter/address-91 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-34 + inet/filter/address-91 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-34 + inet/filter/logpass-34 -m limit --limit 1/second -j LOG + +Filter 249 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-92 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-92 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-92 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-92 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-92 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-92 + inet/filter/address-92 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-92 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/address-92 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-92 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 250 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-93 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-93 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-93 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-93 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-93 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-93 + inet/filter/address-93 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-93 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/address-93 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/address-93 -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 251 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-94 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-94 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-94 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-94 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-94 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-94 + inet/filter/address-94 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-53 + inet/filter/address-94 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-53 + inet/filter/address-94 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-53 + inet/filter/address-94 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-53 + inet/filter/logaccept-53 -m limit --limit 1/second -j LOG + inet/filter/logaccept-53 -j ACCEPT + +Filter 252 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -j address-95 + inet/filter/INPUT -i eth1 -s 10.0.0.0/12 -j address-95 + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -j address-95 + inet/filter/INPUT -i eth2 -s 10.1.0.0/12 -j address-95 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -j address-95 + inet/filter/INPUT -i eth3 -s 10.1.0.0/12 -j address-95 + inet/filter/address-95 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-35 + inet/filter/address-95 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-35 + inet/filter/address-95 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-35 + inet/filter/address-95 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-35 + inet/filter/logpass-35 -m limit --limit 1/second -j LOG + +Filter 253 {"in":["B","C"],"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT + +Filter 254 {"action":"pass","in":["B","C"],"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 + +Filter 255 {"in":["B","C"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 + inet/filter/logaccept-54 -m limit --limit 1/second -j LOG + inet/filter/logaccept-54 -j ACCEPT + +Filter 256 {"action":"pass","in":["B","C"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-36 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-36 + inet/filter/logpass-36 -m limit --limit 1/second -j LOG + +Filter 257 {"dest":"172.16.0.0\/16","in":["B","C"],"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 + inet/filter/address-96 -d 172.16.0.0/16 -j ACCEPT + +Filter 258 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 + inet/filter/address-97 -d 172.16.0.0/16 + +Filter 259 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 + inet/filter/address-98 -d 172.16.0.0/16 -j logaccept-55 + inet/filter/logaccept-55 -m limit --limit 1/second -j LOG + inet/filter/logaccept-55 -j ACCEPT + +Filter 260 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 + inet/filter/address-99 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 261 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 + inet/filter/address-100 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-100 -d 172.16.2.0/16 -j ACCEPT + +Filter 262 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 + inet/filter/address-101 -d 172.16.0.0/16 + inet/filter/address-101 -d 172.16.2.0/16 + +Filter 263 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 + inet/filter/address-102 -d 172.16.0.0/16 -j logaccept-56 + inet/filter/address-102 -d 172.16.2.0/16 -j logaccept-56 + inet/filter/logaccept-56 -m limit --limit 1/second -j LOG + inet/filter/logaccept-56 -j ACCEPT + +Filter 264 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 + inet/filter/address-103 -d 172.16.0.0/16 -j logpass-37 + inet/filter/address-103 -d 172.16.2.0/16 -j logpass-37 + inet/filter/logpass-37 -m limit --limit 1/second -j LOG + +Filter 265 {"in":["B","C"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 + inet/filter/address-104 -s 10.0.0.1 -j ACCEPT + +Filter 266 {"action":"pass","in":["B","C"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 + inet/filter/address-105 -s 10.0.0.1 + +Filter 267 {"in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 + inet/filter/address-106 -s 10.0.0.1 -j logaccept-57 + inet/filter/logaccept-57 -m limit --limit 1/second -j LOG + inet/filter/logaccept-57 -j ACCEPT + +Filter 268 {"action":"pass","in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 + inet/filter/address-107 -s 10.0.0.1 -m limit --limit 1/second -j LOG + +Filter 269 {"dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 + inet/filter/address-108 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + +Filter 270 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 + inet/filter/address-109 -s 10.0.0.1 -d 172.16.0.0/16 + +Filter 271 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 + inet/filter/address-110 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-58 + inet/filter/logaccept-58 -m limit --limit 1/second -j LOG + inet/filter/logaccept-58 -j ACCEPT + +Filter 272 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 + inet/filter/address-111 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG + +Filter 273 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 + inet/filter/address-112 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-112 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + +Filter 274 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 + inet/filter/address-113 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-113 -s 10.0.0.1 -d 172.16.2.0/16 + +Filter 275 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 + inet/filter/address-114 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-59 + inet/filter/address-114 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-59 + inet/filter/logaccept-59 -m limit --limit 1/second -j LOG + inet/filter/logaccept-59 -j ACCEPT + +Filter 276 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":"10.0.0.1"} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 + inet/filter/address-115 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-38 + inet/filter/address-115 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-38 + inet/filter/logpass-38 -m limit --limit 1/second -j LOG + +Filter 277 {"in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 + inet/filter/address-116 -s 10.0.0.1 -j ACCEPT + inet/filter/address-116 -s 10.0.0.2 -j ACCEPT + +Filter 278 {"action":"pass","in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 + inet/filter/address-117 -s 10.0.0.1 + inet/filter/address-117 -s 10.0.0.2 + +Filter 279 {"in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 + inet/filter/address-118 -s 10.0.0.1 -j logaccept-60 + inet/filter/address-118 -s 10.0.0.2 -j logaccept-60 + inet/filter/logaccept-60 -m limit --limit 1/second -j LOG + inet/filter/logaccept-60 -j ACCEPT + +Filter 280 {"action":"pass","in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 + inet/filter/address-119 -s 10.0.0.1 -j logpass-39 + inet/filter/address-119 -s 10.0.0.2 -j logpass-39 + inet/filter/logpass-39 -m limit --limit 1/second -j LOG + +Filter 281 {"dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 + inet/filter/address-120 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-120 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + +Filter 282 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 + inet/filter/address-121 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-121 -s 10.0.0.2 -d 172.16.0.0/16 + +Filter 283 {"dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 + inet/filter/address-122 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-61 + inet/filter/address-122 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-61 + inet/filter/logaccept-61 -m limit --limit 1/second -j LOG + inet/filter/logaccept-61 -j ACCEPT + +Filter 284 {"action":"pass","dest":"172.16.0.0\/16","in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 + inet/filter/address-123 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-40 + inet/filter/address-123 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-40 + inet/filter/logpass-40 -m limit --limit 1/second -j LOG + +Filter 285 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 + inet/filter/address-124 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-124 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT + inet/filter/address-124 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT + inet/filter/address-124 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT + +Filter 286 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 + inet/filter/address-125 -s 10.0.0.1 -d 172.16.0.0/16 + inet/filter/address-125 -s 10.0.0.1 -d 172.16.2.0/16 + inet/filter/address-125 -s 10.0.0.2 -d 172.16.0.0/16 + inet/filter/address-125 -s 10.0.0.2 -d 172.16.2.0/16 + +Filter 287 {"dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 + inet/filter/address-126 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-62 + inet/filter/address-126 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-62 + inet/filter/address-126 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-62 + inet/filter/address-126 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-62 + inet/filter/logaccept-62 -m limit --limit 1/second -j LOG + inet/filter/logaccept-62 -j ACCEPT + +Filter 288 {"action":"pass","dest":["172.16.0.0\/16","172.16.2.0\/16"],"in":["B","C"],"log":true,"out":"B","src":["10.0.0.1","10.0.0.2"]} +(address) + inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 + inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 + inet/filter/address-127 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-41 + inet/filter/address-127 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-41 + inet/filter/address-127 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-41 + inet/filter/address-127 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-41 + inet/filter/logpass-41 -m limit --limit 1/second -j LOG + +Filter 289 {} (filter) inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT @@ -17,7 +2195,7 @@ Filter 1 {} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 2 {"action":"accept"} +Filter 290 {"action":"accept"} (filter) inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT @@ -26,7 +2204,7 @@ Filter 2 {"action":"accept"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 3 {"action":"drop"} +Filter 291 {"action":"drop"} (filter) inet/filter/FORWARD -j logdrop-0 inet6/filter/FORWARD -j logdrop-0 @@ -39,7 +2217,7 @@ Filter 3 {"action":"drop"} inet/filter/logdrop-0 -j DROP inet6/filter/logdrop-0 -j DROP -Filter 4 {"action":"pass"} +Filter 292 {"action":"pass"} (filter) inet/filter/FORWARD inet6/filter/FORWARD @@ -48,7 +2226,7 @@ Filter 4 {"action":"pass"} inet/filter/OUTPUT inet6/filter/OUTPUT -Filter 5 {"action":"reject"} +Filter 293 {"action":"reject"} (filter) inet/filter/FORWARD -j logreject-0 inet6/filter/FORWARD -j logreject-0 @@ -61,7 +2239,7 @@ Filter 5 {"action":"reject"} inet/filter/logreject-0 -j REJECT inet6/filter/logreject-0 -j REJECT -Filter 6 {"action":"tarpit"} +Filter 294 {"action":"tarpit"} (filter) inet/filter/FORWARD -j logtarpit-0 inet6/filter/FORWARD -j logtarpit-0 @@ -78,7 +2256,7 @@ Filter 6 {"action":"tarpit"} inet/raw/OUTPUT -j CT --notrack inet6/raw/OUTPUT -j CT --notrack -Filter 7 {"conn-limit":1,"out":"B"} +Filter 295 {"conn-limit":1,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-0 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-0 @@ -93,7 +2271,7 @@ Filter 7 {"conn-limit":1,"out":"B"} inet/filter/limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 8 {"action":"pass","conn-limit":1,"out":"B"} +Filter 296 {"action":"pass","conn-limit":1,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-1 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1 @@ -108,7 +2286,7 @@ Filter 8 {"action":"pass","conn-limit":1,"out":"B"} inet/filter/limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --set inet6/filter/limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 9 {"conn-limit":1,"log":true,"out":"B"} +Filter 297 {"conn-limit":1,"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-2 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-2 @@ -125,7 +2303,7 @@ Filter 9 {"conn-limit":1,"log":true,"out":"B"} inet/filter/limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 10 {"action":"pass","conn-limit":1,"log":true,"out":"B"} +Filter 298 {"action":"pass","conn-limit":1,"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-3 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-3 @@ -140,7 +2318,7 @@ Filter 10 {"action":"pass","conn-limit":1,"log":true,"o inet/filter/limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 11 {"conn-limit":1,"log":"none","out":"B"} +Filter 299 {"conn-limit":1,"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-4 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-4 @@ -155,7 +2333,7 @@ Filter 11 {"conn-limit":1,"log":"none","out":"B"} inet/filter/limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 12 {"action":"pass","conn-limit":1,"log":"none","out":"B"} +Filter 300 {"action":"pass","conn-limit":1,"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-5 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-5 @@ -170,7 +2348,7 @@ Filter 12 {"action":"pass","conn-limit":1,"log":"none", inet/filter/limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set inet6/filter/limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 13 {"conn-limit":{},"out":"B"} +Filter 301 {"conn-limit":{},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-6 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-6 @@ -185,7 +2363,7 @@ Filter 13 {"conn-limit":{},"out":"B"} inet/filter/limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 14 {"action":"pass","conn-limit":{},"out":"B"} +Filter 302 {"action":"pass","conn-limit":{},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-7 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-7 @@ -200,7 +2378,7 @@ Filter 14 {"action":"pass","conn-limit":{},"out":"B"} inet/filter/limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set inet6/filter/limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 15 {"conn-limit":{},"log":true,"out":"B"} +Filter 303 {"conn-limit":{},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-8 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-8 @@ -217,7 +2395,7 @@ Filter 15 {"conn-limit":{},"log":true,"out":"B"} inet/filter/limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 16 {"action":"pass","conn-limit":{},"log":true,"out":"B"} +Filter 304 {"action":"pass","conn-limit":{},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-9 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-9 @@ -232,7 +2410,7 @@ Filter 16 {"action":"pass","conn-limit":{},"log":true," inet/filter/limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 17 {"conn-limit":{},"log":"none","out":"B"} +Filter 305 {"conn-limit":{},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-10 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-10 @@ -247,7 +2425,7 @@ Filter 17 {"conn-limit":{},"log":"none","out":"B"} inet/filter/limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 18 {"action":"pass","conn-limit":{},"log":"none","out":"B"} +Filter 306 {"action":"pass","conn-limit":{},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-11 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-11 @@ -262,7 +2440,7 @@ Filter 18 {"action":"pass","conn-limit":{},"log":"none" inet/filter/limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set inet6/filter/limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 19 {"conn-limit":{"name":"A"},"out":"B"} +Filter 307 {"conn-limit":{"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-12 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-12 @@ -277,7 +2455,7 @@ Filter 19 {"conn-limit":{"name":"A"},"out":"B"} inet/filter/limit-12 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-12 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 20 {"action":"pass","conn-limit":{"name":"A"},"out":"B"} +Filter 308 {"action":"pass","conn-limit":{"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-13 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-13 @@ -292,7 +2470,7 @@ Filter 20 {"action":"pass","conn-limit":{"name":"A"},"o inet/filter/limit-13 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-13 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 21 {"conn-limit":{"name":"A"},"log":true,"out":"B"} +Filter 309 {"conn-limit":{"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-14 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-14 @@ -309,7 +2487,7 @@ Filter 21 {"conn-limit":{"name":"A"},"log":true,"out":" inet/filter/limit-14 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-14 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 22 {"action":"pass","conn-limit":{"name":"A"},"log":true,"out":"B"} +Filter 310 {"action":"pass","conn-limit":{"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-15 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-15 @@ -324,7 +2502,7 @@ Filter 22 {"action":"pass","conn-limit":{"name":"A"},"l inet/filter/limit-15 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-15 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 23 {"conn-limit":{"name":"A"},"log":"none","out":"B"} +Filter 311 {"conn-limit":{"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-16 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-16 @@ -339,7 +2517,7 @@ Filter 23 {"conn-limit":{"name":"A"},"log":"none","out" inet/filter/limit-16 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-16 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 24 {"action":"pass","conn-limit":{"name":"A"},"log":"none","out":"B"} +Filter 312 {"action":"pass","conn-limit":{"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-17 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-17 @@ -354,7 +2532,7 @@ Filter 24 {"action":"pass","conn-limit":{"name":"A"},"l inet/filter/limit-17 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-17 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 25 {"conn-limit":{"name":"A","update":false},"out":"B"} +Filter 313 {"conn-limit":{"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-18 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-18 @@ -369,7 +2547,7 @@ Filter 25 {"conn-limit":{"name":"A","update":false},"ou inet/filter/limit-18 -j ACCEPT inet6/filter/limit-18 -j ACCEPT -Filter 26 {"action":"pass","conn-limit":{"name":"A","update":false},"out":"B"} +Filter 314 {"action":"pass","conn-limit":{"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-20 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-20 @@ -380,7 +2558,7 @@ Filter 26 {"action":"pass","conn-limit":{"name":"A","up inet/filter/logdrop-20 -j DROP inet6/filter/logdrop-20 -j DROP -Filter 27 {"conn-limit":{"name":"A","update":false},"log":true,"out":"B"} +Filter 315 {"conn-limit":{"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-20 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-20 @@ -397,7 +2575,7 @@ Filter 27 {"conn-limit":{"name":"A","update":false},"lo inet/filter/limit-20 -j ACCEPT inet6/filter/limit-20 -j ACCEPT -Filter 28 {"action":"pass","conn-limit":{"name":"A","update":false},"log":true,"out":"B"} +Filter 316 {"action":"pass","conn-limit":{"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-21 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-21 @@ -412,7 +2590,7 @@ Filter 28 {"action":"pass","conn-limit":{"name":"A","up inet/filter/limit-21 -m limit --limit 1/second -j LOG inet6/filter/limit-21 -m limit --limit 1/second -j LOG -Filter 29 {"conn-limit":{"name":"A","update":false},"log":"none","out":"B"} +Filter 317 {"conn-limit":{"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-22 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-22 @@ -427,7 +2605,7 @@ Filter 29 {"conn-limit":{"name":"A","update":false},"lo inet/filter/limit-22 -j ACCEPT inet6/filter/limit-22 -j ACCEPT -Filter 30 {"action":"pass","conn-limit":{"name":"A","update":false},"log":"none","out":"B"} +Filter 318 {"action":"pass","conn-limit":{"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-24 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-24 @@ -438,7 +2616,7 @@ Filter 30 {"action":"pass","conn-limit":{"name":"A","up inet/filter/logdrop-24 -j DROP inet6/filter/logdrop-24 -j DROP -Filter 31 {"conn-limit":{"addr":"dest","name":"A"},"out":"B"} +Filter 319 {"conn-limit":{"addr":"dest","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-24 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-24 @@ -453,7 +2631,7 @@ Filter 31 {"conn-limit":{"addr":"dest","name":"A"},"out inet/filter/limit-24 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-24 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 32 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"out":"B"} +Filter 320 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-25 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-25 @@ -468,7 +2646,7 @@ Filter 32 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-25 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-25 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 33 {"conn-limit":{"addr":"dest","name":"A"},"log":true,"out":"B"} +Filter 321 {"conn-limit":{"addr":"dest","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-26 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-26 @@ -485,7 +2663,7 @@ Filter 33 {"conn-limit":{"addr":"dest","name":"A"},"log inet/filter/limit-26 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-26 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 34 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":true,"out":"B"} +Filter 322 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-27 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-27 @@ -500,7 +2678,7 @@ Filter 34 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-27 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-27 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 35 {"conn-limit":{"addr":"dest","name":"A"},"log":"none","out":"B"} +Filter 323 {"conn-limit":{"addr":"dest","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-28 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-28 @@ -515,7 +2693,7 @@ Filter 35 {"conn-limit":{"addr":"dest","name":"A"},"log inet/filter/limit-28 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-28 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 36 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":"none","out":"B"} +Filter 324 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-29 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-29 @@ -530,7 +2708,7 @@ Filter 36 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-29 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-29 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 37 {"conn-limit":{"addr":"dest","name":"A","update":false},"out":"B"} +Filter 325 {"conn-limit":{"addr":"dest","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-30 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-30 @@ -545,7 +2723,7 @@ Filter 37 {"conn-limit":{"addr":"dest","name":"A","upda inet/filter/limit-30 -j ACCEPT inet6/filter/limit-30 -j ACCEPT -Filter 38 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"out":"B"} +Filter 326 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 @@ -556,7 +2734,7 @@ Filter 38 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/logdrop-32 -j DROP inet6/filter/logdrop-32 -j DROP -Filter 39 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"} +Filter 327 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-32 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-32 @@ -573,7 +2751,7 @@ Filter 39 {"conn-limit":{"addr":"dest","name":"A","upda inet/filter/limit-32 -j ACCEPT inet6/filter/limit-32 -j ACCEPT -Filter 40 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"} +Filter 328 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-33 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-33 @@ -588,7 +2766,7 @@ Filter 40 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-33 -m limit --limit 1/second -j LOG inet6/filter/limit-33 -m limit --limit 1/second -j LOG -Filter 41 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":"none","out":"B"} +Filter 329 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-34 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-34 @@ -603,7 +2781,7 @@ Filter 41 {"conn-limit":{"addr":"dest","name":"A","upda inet/filter/limit-34 -j ACCEPT inet6/filter/limit-34 -j ACCEPT -Filter 42 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":"none","out":"B"} +Filter 330 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-36 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-36 @@ -614,7 +2792,7 @@ Filter 42 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/logdrop-36 -j DROP inet6/filter/logdrop-36 -j DROP -Filter 43 {"conn-limit":{"name":"C"},"out":"B"} +Filter 331 {"conn-limit":{"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-36 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-36 @@ -629,7 +2807,7 @@ Filter 43 {"conn-limit":{"name":"C"},"out":"B"} inet/filter/limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-36 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 44 {"action":"pass","conn-limit":{"name":"C"},"out":"B"} +Filter 332 {"action":"pass","conn-limit":{"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-37 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-37 @@ -644,7 +2822,7 @@ Filter 44 {"action":"pass","conn-limit":{"name":"C"},"o inet/filter/limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-37 -m recent --name user:C --rsource --mask fe00:: --set -Filter 45 {"conn-limit":{"name":"C"},"log":true,"out":"B"} +Filter 333 {"conn-limit":{"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-38 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-38 @@ -661,7 +2839,7 @@ Filter 45 {"conn-limit":{"name":"C"},"log":true,"out":" inet/filter/limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-38 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 46 {"action":"pass","conn-limit":{"name":"C"},"log":true,"out":"B"} +Filter 334 {"action":"pass","conn-limit":{"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-39 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-39 @@ -676,7 +2854,7 @@ Filter 46 {"action":"pass","conn-limit":{"name":"C"},"l inet/filter/limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-39 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 47 {"conn-limit":{"name":"C"},"log":"none","out":"B"} +Filter 335 {"conn-limit":{"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-40 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-40 @@ -691,7 +2869,7 @@ Filter 47 {"conn-limit":{"name":"C"},"log":"none","out" inet/filter/limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-40 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 48 {"action":"pass","conn-limit":{"name":"C"},"log":"none","out":"B"} +Filter 336 {"action":"pass","conn-limit":{"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-41 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-41 @@ -706,7 +2884,7 @@ Filter 48 {"action":"pass","conn-limit":{"name":"C"},"l inet/filter/limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-41 -m recent --name user:C --rsource --mask fe00:: --set -Filter 49 {"conn-limit":{"name":"C","update":false},"out":"B"} +Filter 337 {"conn-limit":{"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-42 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-42 @@ -721,7 +2899,7 @@ Filter 49 {"conn-limit":{"name":"C","update":false},"ou inet/filter/limit-42 -j ACCEPT inet6/filter/limit-42 -j ACCEPT -Filter 50 {"action":"pass","conn-limit":{"name":"C","update":false},"out":"B"} +Filter 338 {"action":"pass","conn-limit":{"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 @@ -732,7 +2910,7 @@ Filter 50 {"action":"pass","conn-limit":{"name":"C","up inet/filter/logdrop-44 -j DROP inet6/filter/logdrop-44 -j DROP -Filter 51 {"conn-limit":{"name":"C","update":false},"log":true,"out":"B"} +Filter 339 {"conn-limit":{"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-44 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-44 @@ -749,7 +2927,7 @@ Filter 51 {"conn-limit":{"name":"C","update":false},"lo inet/filter/limit-44 -j ACCEPT inet6/filter/limit-44 -j ACCEPT -Filter 52 {"action":"pass","conn-limit":{"name":"C","update":false},"log":true,"out":"B"} +Filter 340 {"action":"pass","conn-limit":{"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-45 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-45 @@ -764,7 +2942,7 @@ Filter 52 {"action":"pass","conn-limit":{"name":"C","up inet/filter/limit-45 -m limit --limit 1/second -j LOG inet6/filter/limit-45 -m limit --limit 1/second -j LOG -Filter 53 {"conn-limit":{"name":"C","update":false},"log":"none","out":"B"} +Filter 341 {"conn-limit":{"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-46 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-46 @@ -779,7 +2957,7 @@ Filter 53 {"conn-limit":{"name":"C","update":false},"lo inet/filter/limit-46 -j ACCEPT inet6/filter/limit-46 -j ACCEPT -Filter 54 {"action":"pass","conn-limit":{"name":"C","update":false},"log":"none","out":"B"} +Filter 342 {"action":"pass","conn-limit":{"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-48 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-48 @@ -790,7 +2968,7 @@ Filter 54 {"action":"pass","conn-limit":{"name":"C","up inet/filter/logdrop-48 -j DROP inet6/filter/logdrop-48 -j DROP -Filter 55 {"conn-limit":{"addr":"dest","name":"C"},"out":"B"} +Filter 343 {"conn-limit":{"addr":"dest","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-48 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-48 @@ -805,7 +2983,7 @@ Filter 55 {"conn-limit":{"addr":"dest","name":"C"},"out inet/filter/limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-48 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 56 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"out":"B"} +Filter 344 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-49 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-49 @@ -820,7 +2998,7 @@ Filter 56 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-49 -m recent --name user:C --rdest --mask fe00:: --set -Filter 57 {"conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} +Filter 345 {"conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-50 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-50 @@ -837,7 +3015,7 @@ Filter 57 {"conn-limit":{"addr":"dest","name":"C"},"log inet/filter/limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-50 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 58 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} +Filter 346 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-51 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-51 @@ -852,7 +3030,7 @@ Filter 58 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-51 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 59 {"conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} +Filter 347 {"conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-52 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-52 @@ -867,7 +3045,7 @@ Filter 59 {"conn-limit":{"addr":"dest","name":"C"},"log inet/filter/limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-52 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 60 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} +Filter 348 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-53 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-53 @@ -882,7 +3060,7 @@ Filter 60 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-53 -m recent --name user:C --rdest --mask fe00:: --set -Filter 61 {"conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} +Filter 349 {"conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-54 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-54 @@ -897,7 +3075,7 @@ Filter 61 {"conn-limit":{"addr":"dest","name":"C","upda inet/filter/limit-54 -j ACCEPT inet6/filter/limit-54 -j ACCEPT -Filter 62 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} +Filter 350 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 @@ -908,7 +3086,7 @@ Filter 62 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/logdrop-56 -j DROP inet6/filter/logdrop-56 -j DROP -Filter 63 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} +Filter 351 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-56 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-56 @@ -925,7 +3103,7 @@ Filter 63 {"conn-limit":{"addr":"dest","name":"C","upda inet/filter/limit-56 -j ACCEPT inet6/filter/limit-56 -j ACCEPT -Filter 64 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} +Filter 352 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-57 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-57 @@ -940,7 +3118,7 @@ Filter 64 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-57 -m limit --limit 1/second -j LOG inet6/filter/limit-57 -m limit --limit 1/second -j LOG -Filter 65 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} +Filter 353 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-58 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-58 @@ -955,7 +3133,7 @@ Filter 65 {"conn-limit":{"addr":"dest","name":"C","upda inet/filter/limit-58 -j ACCEPT inet6/filter/limit-58 -j ACCEPT -Filter 66 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} +Filter 354 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 @@ -966,7 +3144,7 @@ Filter 66 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/logdrop-60 -j DROP inet6/filter/logdrop-60 -j DROP -Filter 67 {"conn-limit":{"log":false},"out":"B"} +Filter 355 {"conn-limit":{"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-60 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-60 @@ -977,7 +3155,7 @@ Filter 67 {"conn-limit":{"log":false},"out":"B"} inet/filter/limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 68 {"action":"pass","conn-limit":{"log":false},"out":"B"} +Filter 356 {"action":"pass","conn-limit":{"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-61 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-61 @@ -988,7 +3166,7 @@ Filter 68 {"action":"pass","conn-limit":{"log":false}," inet/filter/limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --set inet6/filter/limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 69 {"conn-limit":{"log":false},"log":true,"out":"B"} +Filter 357 {"conn-limit":{"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-62 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-62 @@ -1001,7 +3179,7 @@ Filter 69 {"conn-limit":{"log":false},"log":true,"out": inet/filter/limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 70 {"action":"pass","conn-limit":{"log":false},"log":true,"out":"B"} +Filter 358 {"action":"pass","conn-limit":{"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-63 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-63 @@ -1012,7 +3190,7 @@ Filter 70 {"action":"pass","conn-limit":{"log":false}," inet/filter/limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 71 {"conn-limit":{"log":false},"log":"none","out":"B"} +Filter 359 {"conn-limit":{"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-64 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-64 @@ -1023,7 +3201,7 @@ Filter 71 {"conn-limit":{"log":false},"log":"none","out inet/filter/limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 72 {"action":"pass","conn-limit":{"log":false},"log":"none","out":"B"} +Filter 360 {"action":"pass","conn-limit":{"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-65 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-65 @@ -1034,7 +3212,7 @@ Filter 72 {"action":"pass","conn-limit":{"log":false}," inet/filter/limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --set inet6/filter/limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 73 {"conn-limit":{"log":false,"name":"A"},"out":"B"} +Filter 361 {"conn-limit":{"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-66 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-66 @@ -1045,7 +3223,7 @@ Filter 73 {"conn-limit":{"log":false,"name":"A"},"out": inet/filter/limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 74 {"action":"pass","conn-limit":{"log":false,"name":"A"},"out":"B"} +Filter 362 {"action":"pass","conn-limit":{"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-67 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-67 @@ -1056,7 +3234,7 @@ Filter 74 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 75 {"conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} +Filter 363 {"conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-68 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-68 @@ -1069,7 +3247,7 @@ Filter 75 {"conn-limit":{"log":false,"name":"A"},"log": inet/filter/limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 76 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} +Filter 364 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-69 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-69 @@ -1080,7 +3258,7 @@ Filter 76 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 77 {"conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} +Filter 365 {"conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-70 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-70 @@ -1091,7 +3269,7 @@ Filter 77 {"conn-limit":{"log":false,"name":"A"},"log": inet/filter/limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 78 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} +Filter 366 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-71 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-71 @@ -1102,7 +3280,7 @@ Filter 78 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 79 {"conn-limit":{"log":false,"name":"A","update":false},"out":"B"} +Filter 367 {"conn-limit":{"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-72 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-72 @@ -1113,14 +3291,14 @@ Filter 79 {"conn-limit":{"log":false,"name":"A","update inet/filter/limit-72 -j ACCEPT inet6/filter/limit-72 -j ACCEPT -Filter 80 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"out":"B"} +Filter 368 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 81 {"conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 369 {"conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-74 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-74 @@ -1133,7 +3311,7 @@ Filter 81 {"conn-limit":{"log":false,"name":"A","update inet/filter/limit-74 -j ACCEPT inet6/filter/limit-74 -j ACCEPT -Filter 82 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 370 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-75 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-75 @@ -1144,7 +3322,7 @@ Filter 82 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-75 -m limit --limit 1/second -j LOG inet6/filter/limit-75 -m limit --limit 1/second -j LOG -Filter 83 {"conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 371 {"conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-76 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-76 @@ -1155,14 +3333,14 @@ Filter 83 {"conn-limit":{"log":false,"name":"A","update inet/filter/limit-76 -j ACCEPT inet6/filter/limit-76 -j ACCEPT -Filter 84 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 372 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 85 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} +Filter 373 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-78 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-78 @@ -1173,7 +3351,7 @@ Filter 85 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 86 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} +Filter 374 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-79 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-79 @@ -1184,7 +3362,7 @@ Filter 86 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 87 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} +Filter 375 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-80 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-80 @@ -1197,7 +3375,7 @@ Filter 87 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 88 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} +Filter 376 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-81 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-81 @@ -1208,7 +3386,7 @@ Filter 88 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 89 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} +Filter 377 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-82 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-82 @@ -1219,7 +3397,7 @@ Filter 89 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 90 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} +Filter 378 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-83 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-83 @@ -1230,7 +3408,7 @@ Filter 90 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 91 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} +Filter 379 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-84 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-84 @@ -1241,14 +3419,14 @@ Filter 91 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-84 -j ACCEPT inet6/filter/limit-84 -j ACCEPT -Filter 92 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} +Filter 380 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 93 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 381 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-86 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-86 @@ -1261,7 +3439,7 @@ Filter 93 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-86 -j ACCEPT inet6/filter/limit-86 -j ACCEPT -Filter 94 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 382 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-87 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-87 @@ -1272,7 +3450,7 @@ Filter 94 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-87 -m limit --limit 1/second -j LOG inet6/filter/limit-87 -m limit --limit 1/second -j LOG -Filter 95 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 383 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-88 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-88 @@ -1283,14 +3461,14 @@ Filter 95 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-88 -j ACCEPT inet6/filter/limit-88 -j ACCEPT -Filter 96 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 384 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 97 {"conn-limit":{"log":false,"name":"C"},"out":"B"} +Filter 385 {"conn-limit":{"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-90 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-90 @@ -1301,7 +3479,7 @@ Filter 97 {"conn-limit":{"log":false,"name":"C"},"out": inet/filter/limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-90 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 98 {"action":"pass","conn-limit":{"log":false,"name":"C"},"out":"B"} +Filter 386 {"action":"pass","conn-limit":{"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-91 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-91 @@ -1312,7 +3490,7 @@ Filter 98 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-91 -m recent --name user:C --rsource --mask fe00:: --set -Filter 99 {"conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} +Filter 387 {"conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-92 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-92 @@ -1325,7 +3503,7 @@ Filter 99 {"conn-limit":{"log":false,"name":"C"},"log": inet/filter/limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-92 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 100 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} +Filter 388 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-93 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-93 @@ -1336,7 +3514,7 @@ Filter 100 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-93 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 101 {"conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} +Filter 389 {"conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-94 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-94 @@ -1347,7 +3525,7 @@ Filter 101 {"conn-limit":{"log":false,"name":"C"},"log": inet/filter/limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-94 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 102 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} +Filter 390 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-95 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-95 @@ -1358,7 +3536,7 @@ Filter 102 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-95 -m recent --name user:C --rsource --mask fe00:: --set -Filter 103 {"conn-limit":{"log":false,"name":"C","update":false},"out":"B"} +Filter 391 {"conn-limit":{"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-96 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-96 @@ -1369,14 +3547,14 @@ Filter 103 {"conn-limit":{"log":false,"name":"C","update inet/filter/limit-96 -j ACCEPT inet6/filter/limit-96 -j ACCEPT -Filter 104 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"out":"B"} +Filter 392 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 105 {"conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 393 {"conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-98 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-98 @@ -1389,7 +3567,7 @@ Filter 105 {"conn-limit":{"log":false,"name":"C","update inet/filter/limit-98 -j ACCEPT inet6/filter/limit-98 -j ACCEPT -Filter 106 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 394 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-99 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-99 @@ -1400,7 +3578,7 @@ Filter 106 {"action":"pass","conn-limit":{"log":false,"n inet/filter/limit-99 -m limit --limit 1/second -j LOG inet6/filter/limit-99 -m limit --limit 1/second -j LOG -Filter 107 {"conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 395 {"conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-100 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-100 @@ -1411,14 +3589,14 @@ Filter 107 {"conn-limit":{"log":false,"name":"C","update inet/filter/limit-100 -j ACCEPT inet6/filter/limit-100 -j ACCEPT -Filter 108 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 396 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 109 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} +Filter 397 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-102 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-102 @@ -1429,7 +3607,7 @@ Filter 109 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-102 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 110 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} +Filter 398 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-103 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-103 @@ -1440,7 +3618,7 @@ Filter 110 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-103 -m recent --name user:C --rdest --mask fe00:: --set -Filter 111 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} +Filter 399 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-104 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-104 @@ -1453,7 +3631,7 @@ Filter 111 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-104 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 112 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} +Filter 400 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-105 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-105 @@ -1464,7 +3642,7 @@ Filter 112 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-105 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 113 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} +Filter 401 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-106 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-106 @@ -1475,7 +3653,7 @@ Filter 113 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 114 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} +Filter 402 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-107 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-107 @@ -1486,7 +3664,7 @@ Filter 114 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-107 -m recent --name user:C --rdest --mask fe00:: --set -Filter 115 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} +Filter 403 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-108 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-108 @@ -1497,14 +3675,14 @@ Filter 115 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-108 -j ACCEPT inet6/filter/limit-108 -j ACCEPT -Filter 116 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} +Filter 404 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 117 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 405 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-110 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-110 @@ -1517,7 +3695,7 @@ Filter 117 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-110 -j ACCEPT inet6/filter/limit-110 -j ACCEPT -Filter 118 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 406 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-111 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-111 @@ -1528,7 +3706,7 @@ Filter 118 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-111 -m limit --limit 1/second -j LOG inet6/filter/limit-111 -m limit --limit 1/second -j LOG -Filter 119 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 407 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-112 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-112 @@ -1539,14 +3717,14 @@ Filter 119 {"conn-limit":{"addr":"dest","log":false,"nam inet/filter/limit-112 -j ACCEPT inet6/filter/limit-112 -j ACCEPT -Filter 120 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 408 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 121 {"conn-limit":{"log":"none"},"out":"B"} +Filter 409 {"conn-limit":{"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-114 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-114 @@ -1557,7 +3735,7 @@ Filter 121 {"conn-limit":{"log":"none"},"out":"B"} inet/filter/limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 122 {"action":"pass","conn-limit":{"log":"none"},"out":"B"} +Filter 410 {"action":"pass","conn-limit":{"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-115 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-115 @@ -1568,7 +3746,7 @@ Filter 122 {"action":"pass","conn-limit":{"log":"none"}, inet/filter/limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --set inet6/filter/limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 123 {"conn-limit":{"log":"none"},"log":true,"out":"B"} +Filter 411 {"conn-limit":{"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-116 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-116 @@ -1581,7 +3759,7 @@ Filter 123 {"conn-limit":{"log":"none"},"log":true,"out" inet/filter/limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 124 {"action":"pass","conn-limit":{"log":"none"},"log":true,"out":"B"} +Filter 412 {"action":"pass","conn-limit":{"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-117 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-117 @@ -1592,7 +3770,7 @@ Filter 124 {"action":"pass","conn-limit":{"log":"none"}, inet/filter/limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 125 {"conn-limit":{"log":"none"},"log":"none","out":"B"} +Filter 413 {"conn-limit":{"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-118 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-118 @@ -1603,7 +3781,7 @@ Filter 125 {"conn-limit":{"log":"none"},"log":"none","ou inet/filter/limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 126 {"action":"pass","conn-limit":{"log":"none"},"log":"none","out":"B"} +Filter 414 {"action":"pass","conn-limit":{"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-119 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-119 @@ -1614,7 +3792,7 @@ Filter 126 {"action":"pass","conn-limit":{"log":"none"}, inet/filter/limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --set inet6/filter/limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 127 {"conn-limit":{"log":"none","name":"A"},"out":"B"} +Filter 415 {"conn-limit":{"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-120 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-120 @@ -1625,7 +3803,7 @@ Filter 127 {"conn-limit":{"log":"none","name":"A"},"out" inet/filter/limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 128 {"action":"pass","conn-limit":{"log":"none","name":"A"},"out":"B"} +Filter 416 {"action":"pass","conn-limit":{"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-121 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-121 @@ -1636,7 +3814,7 @@ Filter 128 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 129 {"conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} +Filter 417 {"conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-122 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-122 @@ -1649,7 +3827,7 @@ Filter 129 {"conn-limit":{"log":"none","name":"A"},"log" inet/filter/limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 130 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} +Filter 418 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-123 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-123 @@ -1660,7 +3838,7 @@ Filter 130 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 131 {"conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} +Filter 419 {"conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-124 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-124 @@ -1671,7 +3849,7 @@ Filter 131 {"conn-limit":{"log":"none","name":"A"},"log" inet/filter/limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 132 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} +Filter 420 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-125 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-125 @@ -1682,7 +3860,7 @@ Filter 132 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 133 {"conn-limit":{"log":"none","name":"A","update":false},"out":"B"} +Filter 421 {"conn-limit":{"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-126 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-126 @@ -1693,14 +3871,14 @@ Filter 133 {"conn-limit":{"log":"none","name":"A","updat inet/filter/limit-126 -j ACCEPT inet6/filter/limit-126 -j ACCEPT -Filter 134 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"out":"B"} +Filter 422 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 135 {"conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 423 {"conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-128 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-128 @@ -1713,7 +3891,7 @@ Filter 135 {"conn-limit":{"log":"none","name":"A","updat inet/filter/limit-128 -j ACCEPT inet6/filter/limit-128 -j ACCEPT -Filter 136 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 424 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-129 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-129 @@ -1724,7 +3902,7 @@ Filter 136 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-129 -m limit --limit 1/second -j LOG inet6/filter/limit-129 -m limit --limit 1/second -j LOG -Filter 137 {"conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 425 {"conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-130 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-130 @@ -1735,14 +3913,14 @@ Filter 137 {"conn-limit":{"log":"none","name":"A","updat inet/filter/limit-130 -j ACCEPT inet6/filter/limit-130 -j ACCEPT -Filter 138 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 426 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 139 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} +Filter 427 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-132 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-132 @@ -1753,7 +3931,7 @@ Filter 139 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 140 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} +Filter 428 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-133 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-133 @@ -1764,7 +3942,7 @@ Filter 140 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 141 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} +Filter 429 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-134 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-134 @@ -1777,7 +3955,7 @@ Filter 141 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 142 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} +Filter 430 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-135 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-135 @@ -1788,7 +3966,7 @@ Filter 142 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 143 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} +Filter 431 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-136 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-136 @@ -1799,7 +3977,7 @@ Filter 143 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 144 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} +Filter 432 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-137 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-137 @@ -1810,7 +3988,7 @@ Filter 144 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 145 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} +Filter 433 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-138 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-138 @@ -1821,14 +3999,14 @@ Filter 145 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-138 -j ACCEPT inet6/filter/limit-138 -j ACCEPT -Filter 146 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} +Filter 434 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 147 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 435 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-140 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-140 @@ -1841,7 +4019,7 @@ Filter 147 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-140 -j ACCEPT inet6/filter/limit-140 -j ACCEPT -Filter 148 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 436 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-141 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-141 @@ -1852,7 +4030,7 @@ Filter 148 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-141 -m limit --limit 1/second -j LOG inet6/filter/limit-141 -m limit --limit 1/second -j LOG -Filter 149 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 437 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-142 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-142 @@ -1863,14 +4041,14 @@ Filter 149 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-142 -j ACCEPT inet6/filter/limit-142 -j ACCEPT -Filter 150 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 438 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 151 {"conn-limit":{"log":"none","name":"C"},"out":"B"} +Filter 439 {"conn-limit":{"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-144 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-144 @@ -1881,7 +4059,7 @@ Filter 151 {"conn-limit":{"log":"none","name":"C"},"out" inet/filter/limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-144 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 152 {"action":"pass","conn-limit":{"log":"none","name":"C"},"out":"B"} +Filter 440 {"action":"pass","conn-limit":{"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-145 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-145 @@ -1892,7 +4070,7 @@ Filter 152 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-145 -m recent --name user:C --rsource --mask fe00:: --set -Filter 153 {"conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} +Filter 441 {"conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-146 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-146 @@ -1905,7 +4083,7 @@ Filter 153 {"conn-limit":{"log":"none","name":"C"},"log" inet/filter/limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-146 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 154 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} +Filter 442 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-147 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-147 @@ -1916,7 +4094,7 @@ Filter 154 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-147 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 155 {"conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} +Filter 443 {"conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-148 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-148 @@ -1927,7 +4105,7 @@ Filter 155 {"conn-limit":{"log":"none","name":"C"},"log" inet/filter/limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-148 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 156 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} +Filter 444 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-149 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-149 @@ -1938,7 +4116,7 @@ Filter 156 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-149 -m recent --name user:C --rsource --mask fe00:: --set -Filter 157 {"conn-limit":{"log":"none","name":"C","update":false},"out":"B"} +Filter 445 {"conn-limit":{"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-150 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-150 @@ -1949,14 +4127,14 @@ Filter 157 {"conn-limit":{"log":"none","name":"C","updat inet/filter/limit-150 -j ACCEPT inet6/filter/limit-150 -j ACCEPT -Filter 158 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"out":"B"} +Filter 446 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 159 {"conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 447 {"conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-152 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-152 @@ -1969,7 +4147,7 @@ Filter 159 {"conn-limit":{"log":"none","name":"C","updat inet/filter/limit-152 -j ACCEPT inet6/filter/limit-152 -j ACCEPT -Filter 160 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 448 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-153 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-153 @@ -1980,7 +4158,7 @@ Filter 160 {"action":"pass","conn-limit":{"log":"none"," inet/filter/limit-153 -m limit --limit 1/second -j LOG inet6/filter/limit-153 -m limit --limit 1/second -j LOG -Filter 161 {"conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 449 {"conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-154 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-154 @@ -1991,14 +4169,14 @@ Filter 161 {"conn-limit":{"log":"none","name":"C","updat inet/filter/limit-154 -j ACCEPT inet6/filter/limit-154 -j ACCEPT -Filter 162 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 450 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 163 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} +Filter 451 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-156 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-156 @@ -2009,7 +4187,7 @@ Filter 163 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-156 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 164 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} +Filter 452 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-157 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-157 @@ -2020,7 +4198,7 @@ Filter 164 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-157 -m recent --name user:C --rdest --mask fe00:: --set -Filter 165 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} +Filter 453 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-158 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-158 @@ -2033,7 +4211,7 @@ Filter 165 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-158 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 166 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} +Filter 454 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-159 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-159 @@ -2044,7 +4222,7 @@ Filter 166 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-159 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 167 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} +Filter 455 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-160 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-160 @@ -2055,7 +4233,7 @@ Filter 167 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-160 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 168 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} +Filter 456 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-161 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-161 @@ -2066,7 +4244,7 @@ Filter 168 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-161 -m recent --name user:C --rdest --mask fe00:: --set -Filter 169 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} +Filter 457 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-162 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-162 @@ -2077,14 +4255,14 @@ Filter 169 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-162 -j ACCEPT inet6/filter/limit-162 -j ACCEPT -Filter 170 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} +Filter 458 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 171 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 459 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-164 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-164 @@ -2097,7 +4275,7 @@ Filter 171 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-164 -j ACCEPT inet6/filter/limit-164 -j ACCEPT -Filter 172 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 460 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-165 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-165 @@ -2108,7 +4286,7 @@ Filter 172 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-165 -m limit --limit 1/second -j LOG inet6/filter/limit-165 -m limit --limit 1/second -j LOG -Filter 173 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 461 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-166 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-166 @@ -2119,14 +4297,14 @@ Filter 173 {"conn-limit":{"addr":"dest","log":"none","na inet/filter/limit-166 -j ACCEPT inet6/filter/limit-166 -j ACCEPT -Filter 174 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 462 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 175 {"conn-limit":{"interval":5},"out":"B"} +Filter 463 {"conn-limit":{"interval":5},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-168 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-168 @@ -2141,7 +4319,7 @@ Filter 175 {"conn-limit":{"interval":5},"out":"B"} inet/filter/limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 176 {"action":"pass","conn-limit":{"interval":5},"out":"B"} +Filter 464 {"action":"pass","conn-limit":{"interval":5},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-169 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-169 @@ -2156,7 +4334,7 @@ Filter 176 {"action":"pass","conn-limit":{"interval":5}, inet/filter/limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --set inet6/filter/limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 177 {"conn-limit":{"interval":5},"log":true,"out":"B"} +Filter 465 {"conn-limit":{"interval":5},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-170 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-170 @@ -2173,7 +4351,7 @@ Filter 177 {"conn-limit":{"interval":5},"log":true,"out" inet/filter/limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 178 {"action":"pass","conn-limit":{"interval":5},"log":true,"out":"B"} +Filter 466 {"action":"pass","conn-limit":{"interval":5},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-171 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-171 @@ -2188,7 +4366,7 @@ Filter 178 {"action":"pass","conn-limit":{"interval":5}, inet/filter/limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 179 {"conn-limit":{"interval":5},"log":"none","out":"B"} +Filter 467 {"conn-limit":{"interval":5},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-172 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-172 @@ -2203,7 +4381,7 @@ Filter 179 {"conn-limit":{"interval":5},"log":"none","ou inet/filter/limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 180 {"action":"pass","conn-limit":{"interval":5},"log":"none","out":"B"} +Filter 468 {"action":"pass","conn-limit":{"interval":5},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-173 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-173 @@ -2218,7 +4396,7 @@ Filter 180 {"action":"pass","conn-limit":{"interval":5}, inet/filter/limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --set inet6/filter/limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 181 {"conn-limit":{"interval":5,"name":"A"},"out":"B"} +Filter 469 {"conn-limit":{"interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-174 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-174 @@ -2233,7 +4411,7 @@ Filter 181 {"conn-limit":{"interval":5,"name":"A"},"out" inet/filter/limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 182 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"out":"B"} +Filter 470 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-175 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-175 @@ -2248,7 +4426,7 @@ Filter 182 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 183 {"conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} +Filter 471 {"conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-176 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-176 @@ -2265,7 +4443,7 @@ Filter 183 {"conn-limit":{"interval":5,"name":"A"},"log" inet/filter/limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 184 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} +Filter 472 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-177 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-177 @@ -2280,7 +4458,7 @@ Filter 184 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 185 {"conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} +Filter 473 {"conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-178 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-178 @@ -2295,7 +4473,7 @@ Filter 185 {"conn-limit":{"interval":5,"name":"A"},"log" inet/filter/limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 186 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} +Filter 474 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-179 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-179 @@ -2310,7 +4488,7 @@ Filter 186 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 187 {"conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} +Filter 475 {"conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-180 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-180 @@ -2325,7 +4503,7 @@ Filter 187 {"conn-limit":{"interval":5,"name":"A","updat inet/filter/limit-180 -j ACCEPT inet6/filter/limit-180 -j ACCEPT -Filter 188 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} +Filter 476 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 @@ -2336,7 +4514,7 @@ Filter 188 {"action":"pass","conn-limit":{"interval":5," inet/filter/logdrop-74 -j DROP inet6/filter/logdrop-74 -j DROP -Filter 189 {"conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 477 {"conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-182 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-182 @@ -2353,7 +4531,7 @@ Filter 189 {"conn-limit":{"interval":5,"name":"A","updat inet/filter/limit-182 -j ACCEPT inet6/filter/limit-182 -j ACCEPT -Filter 190 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 478 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-183 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-183 @@ -2368,7 +4546,7 @@ Filter 190 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-183 -m limit --limit 1/second -j LOG inet6/filter/limit-183 -m limit --limit 1/second -j LOG -Filter 191 {"conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 479 {"conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-184 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-184 @@ -2383,7 +4561,7 @@ Filter 191 {"conn-limit":{"interval":5,"name":"A","updat inet/filter/limit-184 -j ACCEPT inet6/filter/limit-184 -j ACCEPT -Filter 192 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 480 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-78 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-78 @@ -2394,7 +4572,7 @@ Filter 192 {"action":"pass","conn-limit":{"interval":5," inet/filter/logdrop-78 -j DROP inet6/filter/logdrop-78 -j DROP -Filter 193 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} +Filter 481 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-186 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-186 @@ -2409,7 +4587,7 @@ Filter 193 {"conn-limit":{"addr":"dest","interval":5,"na inet/filter/limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 194 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} +Filter 482 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-187 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-187 @@ -2424,7 +4602,7 @@ Filter 194 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 195 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} +Filter 483 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-188 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-188 @@ -2441,7 +4619,7 @@ Filter 195 {"conn-limit":{"addr":"dest","interval":5,"na inet/filter/limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 196 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} +Filter 484 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-189 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-189 @@ -2456,7 +4634,7 @@ Filter 196 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 197 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} +Filter 485 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-190 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-190 @@ -2471,7 +4649,7 @@ Filter 197 {"conn-limit":{"addr":"dest","interval":5,"na inet/filter/limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 198 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} +Filter 486 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-191 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-191 @@ -2486,7 +4664,7 @@ Filter 198 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 199 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} +Filter 487 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-192 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-192 @@ -2501,7 +4679,7 @@ Filter 199 {"conn-limit":{"addr":"dest","interval":5,"na inet/filter/limit-192 -j ACCEPT inet6/filter/limit-192 -j ACCEPT -Filter 200 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} +Filter 488 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 @@ -2512,7 +4690,7 @@ Filter 200 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/logdrop-86 -j DROP inet6/filter/logdrop-86 -j DROP -Filter 201 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 489 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-194 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-194 @@ -2529,7 +4707,7 @@ Filter 201 {"conn-limit":{"addr":"dest","interval":5,"na inet/filter/limit-194 -j ACCEPT inet6/filter/limit-194 -j ACCEPT -Filter 202 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 490 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-195 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-195 @@ -2544,7 +4722,7 @@ Filter 202 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-195 -m limit --limit 1/second -j LOG inet6/filter/limit-195 -m limit --limit 1/second -j LOG -Filter 203 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 491 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-196 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-196 @@ -2559,7 +4737,7 @@ Filter 203 {"conn-limit":{"addr":"dest","interval":5,"na inet/filter/limit-196 -j ACCEPT inet6/filter/limit-196 -j ACCEPT -Filter 204 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 492 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-90 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-90 @@ -2570,7 +4748,7 @@ Filter 204 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/logdrop-90 -j DROP inet6/filter/logdrop-90 -j DROP -Filter 205 {"conn-limit":{"interval":5,"name":"C"},"out":"B"} +Filter 493 {"conn-limit":{"interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-198 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-198 @@ -2585,7 +4763,7 @@ Filter 205 {"conn-limit":{"interval":5,"name":"C"},"out" inet/filter/limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-198 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 206 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"out":"B"} +Filter 494 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-199 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-199 @@ -2600,7 +4778,7 @@ Filter 206 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-199 -m recent --name user:C --rsource --mask fe00:: --set -Filter 207 {"conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} +Filter 495 {"conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-200 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-200 @@ -2617,7 +4795,7 @@ Filter 207 {"conn-limit":{"interval":5,"name":"C"},"log" inet/filter/limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-200 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 208 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} +Filter 496 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-201 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-201 @@ -2632,7 +4810,7 @@ Filter 208 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-201 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 209 {"conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} +Filter 497 {"conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-202 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-202 @@ -2647,7 +4825,7 @@ Filter 209 {"conn-limit":{"interval":5,"name":"C"},"log" inet/filter/limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-202 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 210 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} +Filter 498 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-203 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-203 @@ -2662,7 +4840,7 @@ Filter 210 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-203 -m recent --name user:C --rsource --mask fe00:: --set -Filter 211 {"conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} +Filter 499 {"conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-204 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-204 @@ -2677,7 +4855,7 @@ Filter 211 {"conn-limit":{"interval":5,"name":"C","updat inet/filter/limit-204 -j ACCEPT inet6/filter/limit-204 -j ACCEPT -Filter 212 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} +Filter 500 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 @@ -2688,7 +4866,7 @@ Filter 212 {"action":"pass","conn-limit":{"interval":5," inet/filter/logdrop-98 -j DROP inet6/filter/logdrop-98 -j DROP -Filter 213 {"conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} +Filter 501 {"conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-206 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-206 @@ -2705,7 +4883,7 @@ Filter 213 {"conn-limit":{"interval":5,"name":"C","updat inet/filter/limit-206 -j ACCEPT inet6/filter/limit-206 -j ACCEPT -Filter 214 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} +Filter 502 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-207 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-207 @@ -2720,7 +4898,7 @@ Filter 214 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-207 -m limit --limit 1/second -j LOG inet6/filter/limit-207 -m limit --limit 1/second -j LOG -Filter 215 {"conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} +Filter 503 {"conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-208 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-208 @@ -2735,7 +4913,7 @@ Filter 215 {"conn-limit":{"interval":5,"name":"C","updat inet/filter/limit-208 -j ACCEPT inet6/filter/limit-208 -j ACCEPT -Filter 216 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} +Filter 504 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-102 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-102 @@ -2746,7 +4924,7 @@ Filter 216 {"action":"pass","conn-limit":{"interval":5," inet/filter/logdrop-102 -j DROP inet6/filter/logdrop-102 -j DROP -Filter 217 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} +Filter 505 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-210 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-210 @@ -2761,7 +4939,7 @@ Filter 217 {"conn-limit":{"addr":"dest","interval":5,"na inet/filter/limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-210 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 218 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} +Filter 506 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-211 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-211 @@ -2776,7 +4954,7 @@ Filter 218 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-211 -m recent --name user:C --rdest --mask fe00:: --set -Filter 219 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} +Filter 507 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-212 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-212 @@ -2793,7 +4971,7 @@ Filter 219 {"conn-limit":{"addr":"dest","interval":5,"na inet/filter/limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-212 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 220 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} +Filter 508 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-213 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-213 @@ -2808,7 +4986,7 @@ Filter 220 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-213 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 221 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} +Filter 509 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-214 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-214 @@ -2823,7 +5001,7 @@ Filter 221 {"conn-limit":{"addr":"dest","interval":5,"na inet/filter/limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-214 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 222 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} +Filter 510 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-215 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-215 @@ -2838,7 +5016,7 @@ Filter 222 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-215 -m recent --name user:C --rdest --mask fe00:: --set -Filter 223 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} +Filter 511 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-216 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-216 @@ -2853,7 +5031,7 @@ Filter 223 {"conn-limit":{"addr":"dest","interval":5,"na inet/filter/limit-216 -j ACCEPT inet6/filter/limit-216 -j ACCEPT -Filter 224 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} +Filter 512 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 @@ -2864,7 +5042,7 @@ Filter 224 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/logdrop-110 -j DROP inet6/filter/logdrop-110 -j DROP -Filter 225 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} +Filter 513 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-218 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-218 @@ -2881,7 +5059,7 @@ Filter 225 {"conn-limit":{"addr":"dest","interval":5,"na inet/filter/limit-218 -j ACCEPT inet6/filter/limit-218 -j ACCEPT -Filter 226 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} +Filter 514 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-219 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-219 @@ -2896,7 +5074,7 @@ Filter 226 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-219 -m limit --limit 1/second -j LOG inet6/filter/limit-219 -m limit --limit 1/second -j LOG -Filter 227 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} +Filter 515 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-220 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-220 @@ -2911,7 +5089,7 @@ Filter 227 {"conn-limit":{"addr":"dest","interval":5,"na inet/filter/limit-220 -j ACCEPT inet6/filter/limit-220 -j ACCEPT -Filter 228 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} +Filter 516 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-114 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-114 @@ -2922,7 +5100,7 @@ Filter 228 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/logdrop-114 -j DROP inet6/filter/logdrop-114 -j DROP -Filter 229 {"conn-limit":{"interval":5,"log":false},"out":"B"} +Filter 517 {"conn-limit":{"interval":5,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-222 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-222 @@ -2933,7 +5111,7 @@ Filter 229 {"conn-limit":{"interval":5,"log":false},"out inet/filter/limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 230 {"action":"pass","conn-limit":{"interval":5,"log":false},"out":"B"} +Filter 518 {"action":"pass","conn-limit":{"interval":5,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-223 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-223 @@ -2944,7 +5122,7 @@ Filter 230 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --set inet6/filter/limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 231 {"conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} +Filter 519 {"conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-224 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-224 @@ -2957,7 +5135,7 @@ Filter 231 {"conn-limit":{"interval":5,"log":false},"log inet/filter/limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 232 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} +Filter 520 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-225 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-225 @@ -2968,7 +5146,7 @@ Filter 232 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 233 {"conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} +Filter 521 {"conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-226 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-226 @@ -2979,7 +5157,7 @@ Filter 233 {"conn-limit":{"interval":5,"log":false},"log inet/filter/limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 234 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} +Filter 522 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-227 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-227 @@ -2990,7 +5168,7 @@ Filter 234 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --set inet6/filter/limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 235 {"conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} +Filter 523 {"conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-228 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-228 @@ -3001,7 +5179,7 @@ Filter 235 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 236 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} +Filter 524 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-229 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-229 @@ -3012,7 +5190,7 @@ Filter 236 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 237 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 525 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-230 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-230 @@ -3025,7 +5203,7 @@ Filter 237 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 238 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 526 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-231 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-231 @@ -3036,7 +5214,7 @@ Filter 238 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 239 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 527 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-232 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-232 @@ -3047,7 +5225,7 @@ Filter 239 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 240 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 528 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-233 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-233 @@ -3058,7 +5236,7 @@ Filter 240 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 241 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 529 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-234 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-234 @@ -3069,14 +5247,14 @@ Filter 241 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-234 -j ACCEPT inet6/filter/limit-234 -j ACCEPT -Filter 242 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 530 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 243 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 531 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-236 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-236 @@ -3089,7 +5267,7 @@ Filter 243 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-236 -j ACCEPT inet6/filter/limit-236 -j ACCEPT -Filter 244 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 532 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-237 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-237 @@ -3100,7 +5278,7 @@ Filter 244 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-237 -m limit --limit 1/second -j LOG inet6/filter/limit-237 -m limit --limit 1/second -j LOG -Filter 245 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 533 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-238 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-238 @@ -3111,14 +5289,14 @@ Filter 245 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-238 -j ACCEPT inet6/filter/limit-238 -j ACCEPT -Filter 246 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 534 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 247 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} +Filter 535 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-240 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-240 @@ -3129,7 +5307,7 @@ Filter 247 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 248 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} +Filter 536 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-241 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-241 @@ -3140,7 +5318,7 @@ Filter 248 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 249 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 537 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-242 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-242 @@ -3153,7 +5331,7 @@ Filter 249 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 250 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 538 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-243 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-243 @@ -3164,7 +5342,7 @@ Filter 250 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 251 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 539 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-244 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-244 @@ -3175,7 +5353,7 @@ Filter 251 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 252 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 540 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-245 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-245 @@ -3186,7 +5364,7 @@ Filter 252 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 253 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 541 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-246 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-246 @@ -3197,14 +5375,14 @@ Filter 253 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-246 -j ACCEPT inet6/filter/limit-246 -j ACCEPT -Filter 254 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 542 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 255 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 543 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-248 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-248 @@ -3217,7 +5395,7 @@ Filter 255 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-248 -j ACCEPT inet6/filter/limit-248 -j ACCEPT -Filter 256 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 544 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-249 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-249 @@ -3228,7 +5406,7 @@ Filter 256 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-249 -m limit --limit 1/second -j LOG inet6/filter/limit-249 -m limit --limit 1/second -j LOG -Filter 257 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 545 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-250 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-250 @@ -3239,14 +5417,14 @@ Filter 257 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-250 -j ACCEPT inet6/filter/limit-250 -j ACCEPT -Filter 258 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 546 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 259 {"conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} +Filter 547 {"conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-252 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-252 @@ -3257,7 +5435,7 @@ Filter 259 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-252 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 260 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} +Filter 548 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-253 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-253 @@ -3268,7 +5446,7 @@ Filter 260 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-253 -m recent --name user:C --rsource --mask fe00:: --set -Filter 261 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +Filter 549 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-254 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-254 @@ -3281,7 +5459,7 @@ Filter 261 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-254 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 262 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +Filter 550 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-255 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-255 @@ -3292,7 +5470,7 @@ Filter 262 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-255 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 263 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +Filter 551 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-256 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-256 @@ -3303,7 +5481,7 @@ Filter 263 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-256 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 264 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +Filter 552 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-257 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-257 @@ -3314,7 +5492,7 @@ Filter 264 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-257 -m recent --name user:C --rsource --mask fe00:: --set -Filter 265 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} +Filter 553 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-258 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-258 @@ -3325,14 +5503,14 @@ Filter 265 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-258 -j ACCEPT inet6/filter/limit-258 -j ACCEPT -Filter 266 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} +Filter 554 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 267 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 555 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-260 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-260 @@ -3345,7 +5523,7 @@ Filter 267 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-260 -j ACCEPT inet6/filter/limit-260 -j ACCEPT -Filter 268 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 556 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-261 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-261 @@ -3356,7 +5534,7 @@ Filter 268 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-261 -m limit --limit 1/second -j LOG inet6/filter/limit-261 -m limit --limit 1/second -j LOG -Filter 269 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 557 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-262 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-262 @@ -3367,14 +5545,14 @@ Filter 269 {"conn-limit":{"interval":5,"log":false,"name inet/filter/limit-262 -j ACCEPT inet6/filter/limit-262 -j ACCEPT -Filter 270 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 558 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 271 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} +Filter 559 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-264 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-264 @@ -3385,7 +5563,7 @@ Filter 271 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 272 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} +Filter 560 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-265 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-265 @@ -3396,7 +5574,7 @@ Filter 272 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-265 -m recent --name user:C --rdest --mask fe00:: --set -Filter 273 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +Filter 561 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-266 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-266 @@ -3409,7 +5587,7 @@ Filter 273 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 274 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +Filter 562 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-267 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-267 @@ -3420,7 +5598,7 @@ Filter 274 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-267 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 275 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +Filter 563 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-268 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-268 @@ -3431,7 +5609,7 @@ Filter 275 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 276 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +Filter 564 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-269 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-269 @@ -3442,7 +5620,7 @@ Filter 276 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-269 -m recent --name user:C --rdest --mask fe00:: --set -Filter 277 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} +Filter 565 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-270 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-270 @@ -3453,14 +5631,14 @@ Filter 277 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-270 -j ACCEPT inet6/filter/limit-270 -j ACCEPT -Filter 278 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} +Filter 566 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 279 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 567 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-272 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-272 @@ -3473,7 +5651,7 @@ Filter 279 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-272 -j ACCEPT inet6/filter/limit-272 -j ACCEPT -Filter 280 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +Filter 568 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-273 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-273 @@ -3484,7 +5662,7 @@ Filter 280 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-273 -m limit --limit 1/second -j LOG inet6/filter/limit-273 -m limit --limit 1/second -j LOG -Filter 281 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 569 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-274 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-274 @@ -3495,14 +5673,14 @@ Filter 281 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-274 -j ACCEPT inet6/filter/limit-274 -j ACCEPT -Filter 282 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +Filter 570 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 283 {"conn-limit":{"interval":5,"log":"none"},"out":"B"} +Filter 571 {"conn-limit":{"interval":5,"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-276 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-276 @@ -3513,7 +5691,7 @@ Filter 283 {"conn-limit":{"interval":5,"log":"none"},"ou inet/filter/limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 284 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"out":"B"} +Filter 572 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-277 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-277 @@ -3524,7 +5702,7 @@ Filter 284 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --set inet6/filter/limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 285 {"conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} +Filter 573 {"conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-278 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-278 @@ -3537,7 +5715,7 @@ Filter 285 {"conn-limit":{"interval":5,"log":"none"},"lo inet/filter/limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 286 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} +Filter 574 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-279 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-279 @@ -3548,7 +5726,7 @@ Filter 286 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 287 {"conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} +Filter 575 {"conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-280 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-280 @@ -3559,7 +5737,7 @@ Filter 287 {"conn-limit":{"interval":5,"log":"none"},"lo inet/filter/limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 288 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} +Filter 576 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-281 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-281 @@ -3570,7 +5748,7 @@ Filter 288 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set inet6/filter/limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 289 {"conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} +Filter 577 {"conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-282 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-282 @@ -3581,7 +5759,7 @@ Filter 289 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 290 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} +Filter 578 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-283 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-283 @@ -3592,7 +5770,7 @@ Filter 290 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 291 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 579 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-284 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-284 @@ -3605,7 +5783,7 @@ Filter 291 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 292 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 580 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-285 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-285 @@ -3616,7 +5794,7 @@ Filter 292 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 293 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 581 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-286 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-286 @@ -3627,7 +5805,7 @@ Filter 293 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 294 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 582 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-287 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-287 @@ -3638,7 +5816,7 @@ Filter 294 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 295 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} +Filter 583 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-288 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-288 @@ -3649,14 +5827,14 @@ Filter 295 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-288 -j ACCEPT inet6/filter/limit-288 -j ACCEPT -Filter 296 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} +Filter 584 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 297 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 585 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-290 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-290 @@ -3669,7 +5847,7 @@ Filter 297 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-290 -j ACCEPT inet6/filter/limit-290 -j ACCEPT -Filter 298 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 586 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-291 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-291 @@ -3680,7 +5858,7 @@ Filter 298 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-291 -m limit --limit 1/second -j LOG inet6/filter/limit-291 -m limit --limit 1/second -j LOG -Filter 299 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 587 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-292 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-292 @@ -3691,14 +5869,14 @@ Filter 299 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-292 -j ACCEPT inet6/filter/limit-292 -j ACCEPT -Filter 300 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 588 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 301 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} +Filter 589 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-294 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-294 @@ -3709,7 +5887,7 @@ Filter 301 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 302 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} +Filter 590 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-295 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-295 @@ -3720,7 +5898,7 @@ Filter 302 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 303 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 591 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-296 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-296 @@ -3733,7 +5911,7 @@ Filter 303 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 304 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 592 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-297 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-297 @@ -3744,7 +5922,7 @@ Filter 304 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 305 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 593 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-298 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-298 @@ -3755,7 +5933,7 @@ Filter 305 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 306 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 594 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-299 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-299 @@ -3766,7 +5944,7 @@ Filter 306 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 307 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} +Filter 595 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-300 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-300 @@ -3777,14 +5955,14 @@ Filter 307 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-300 -j ACCEPT inet6/filter/limit-300 -j ACCEPT -Filter 308 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} +Filter 596 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 309 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 597 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-302 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-302 @@ -3797,7 +5975,7 @@ Filter 309 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-302 -j ACCEPT inet6/filter/limit-302 -j ACCEPT -Filter 310 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 598 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-303 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-303 @@ -3808,7 +5986,7 @@ Filter 310 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-303 -m limit --limit 1/second -j LOG inet6/filter/limit-303 -m limit --limit 1/second -j LOG -Filter 311 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 599 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-304 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-304 @@ -3819,14 +5997,14 @@ Filter 311 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-304 -j ACCEPT inet6/filter/limit-304 -j ACCEPT -Filter 312 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 600 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 313 {"conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} +Filter 601 {"conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-306 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-306 @@ -3837,7 +6015,7 @@ Filter 313 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-306 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 314 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} +Filter 602 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-307 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-307 @@ -3848,7 +6026,7 @@ Filter 314 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-307 -m recent --name user:C --rsource --mask fe00:: --set -Filter 315 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +Filter 603 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-308 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-308 @@ -3861,7 +6039,7 @@ Filter 315 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 316 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +Filter 604 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-309 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-309 @@ -3872,7 +6050,7 @@ Filter 316 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 317 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +Filter 605 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-310 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-310 @@ -3883,7 +6061,7 @@ Filter 317 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 318 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +Filter 606 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-311 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-311 @@ -3894,7 +6072,7 @@ Filter 318 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-311 -m recent --name user:C --rsource --mask fe00:: --set -Filter 319 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} +Filter 607 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-312 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-312 @@ -3905,14 +6083,14 @@ Filter 319 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-312 -j ACCEPT inet6/filter/limit-312 -j ACCEPT -Filter 320 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} +Filter 608 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 321 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 609 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-314 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-314 @@ -3925,7 +6103,7 @@ Filter 321 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-314 -j ACCEPT inet6/filter/limit-314 -j ACCEPT -Filter 322 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 610 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-315 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-315 @@ -3936,7 +6114,7 @@ Filter 322 {"action":"pass","conn-limit":{"interval":5," inet/filter/limit-315 -m limit --limit 1/second -j LOG inet6/filter/limit-315 -m limit --limit 1/second -j LOG -Filter 323 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 611 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-316 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-316 @@ -3947,14 +6125,14 @@ Filter 323 {"conn-limit":{"interval":5,"log":"none","nam inet/filter/limit-316 -j ACCEPT inet6/filter/limit-316 -j ACCEPT -Filter 324 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 612 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 325 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} +Filter 613 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-318 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-318 @@ -3965,7 +6143,7 @@ Filter 325 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-318 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 326 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} +Filter 614 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-319 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-319 @@ -3976,7 +6154,7 @@ Filter 326 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-319 -m recent --name user:C --rdest --mask fe00:: --set -Filter 327 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +Filter 615 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-320 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-320 @@ -3989,7 +6167,7 @@ Filter 327 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-320 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 328 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +Filter 616 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-321 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-321 @@ -4000,7 +6178,7 @@ Filter 328 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-321 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 329 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +Filter 617 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-322 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-322 @@ -4011,7 +6189,7 @@ Filter 329 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/limit-322 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 330 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +Filter 618 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-323 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-323 @@ -4022,7 +6200,7 @@ Filter 330 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-323 -m recent --name user:C --rdest --mask fe00:: --set -Filter 331 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} +Filter 619 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-324 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-324 @@ -4033,14 +6211,14 @@ Filter 331 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-324 -j ACCEPT inet6/filter/limit-324 -j ACCEPT -Filter 332 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} +Filter 620 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 333 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 621 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-326 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-326 @@ -4053,7 +6231,7 @@ Filter 333 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-326 -j ACCEPT inet6/filter/limit-326 -j ACCEPT -Filter 334 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +Filter 622 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-327 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-327 @@ -4064,7 +6242,7 @@ Filter 334 {"action":"pass","conn-limit":{"addr":"dest", inet/filter/limit-327 -m limit --limit 1/second -j LOG inet6/filter/limit-327 -m limit --limit 1/second -j LOG -Filter 335 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 623 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-328 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-328 @@ -4075,14 +6253,14 @@ Filter 335 {"conn-limit":{"addr":"dest","interval":5,"lo inet/filter/limit-328 -j ACCEPT inet6/filter/limit-328 -j ACCEPT -Filter 336 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +Filter 624 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 337 {"conn-limit":150,"out":"B"} +Filter 625 {"conn-limit":150,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-330 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-330 @@ -4095,7 +6273,7 @@ Filter 337 {"conn-limit":150,"out":"B"} inet/filter/limit-330 -j DROP inet6/filter/limit-330 -j DROP -Filter 338 {"action":"pass","conn-limit":150,"out":"B"} +Filter 626 {"action":"pass","conn-limit":150,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-331 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-331 @@ -4108,24 +6286,24 @@ Filter 338 {"action":"pass","conn-limit":150,"out":"B"} inet/filter/limit-331 -j DROP inet6/filter/limit-331 -j DROP -Filter 339 {"conn-limit":150,"log":true,"out":"B"} +Filter 627 {"conn-limit":150,"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-332 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-332 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-332 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-332 - inet/filter/limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-0 - inet6/filter/limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-0 - inet/filter/logaccept-0 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG - inet/filter/logaccept-0 -j ACCEPT - inet6/filter/logaccept-0 -j ACCEPT + inet/filter/limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-63 + inet6/filter/limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-63 + inet/filter/logaccept-63 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-63 -m limit --limit 1/second -j LOG + inet/filter/logaccept-63 -j ACCEPT + inet6/filter/logaccept-63 -j ACCEPT inet/filter/limit-332 -m limit --limit 1/second -j LOG inet6/filter/limit-332 -m limit --limit 1/second -j LOG inet/filter/limit-332 -j DROP inet6/filter/limit-332 -j DROP -Filter 340 {"conn-limit":150,"log":"none","out":"B"} +Filter 628 {"conn-limit":150,"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-333 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-333 @@ -4138,7 +6316,7 @@ Filter 340 {"conn-limit":150,"log":"none","out":"B"} inet/filter/limit-333 -j DROP inet6/filter/limit-333 -j DROP -Filter 341 {"conn-limit":{"count":150},"out":"B"} +Filter 629 {"conn-limit":{"count":150},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-334 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-334 @@ -4151,7 +6329,7 @@ Filter 341 {"conn-limit":{"count":150},"out":"B"} inet/filter/limit-334 -j DROP inet6/filter/limit-334 -j DROP -Filter 342 {"action":"pass","conn-limit":{"count":150},"out":"B"} +Filter 630 {"action":"pass","conn-limit":{"count":150},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-335 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-335 @@ -4164,24 +6342,24 @@ Filter 342 {"action":"pass","conn-limit":{"count":150}," inet/filter/limit-335 -j DROP inet6/filter/limit-335 -j DROP -Filter 343 {"conn-limit":{"count":150},"log":true,"out":"B"} +Filter 631 {"conn-limit":{"count":150},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-336 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-336 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-336 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-336 - inet/filter/limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-1 - inet6/filter/limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-1 - inet/filter/logaccept-1 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-1 -m limit --limit 1/second -j LOG - inet/filter/logaccept-1 -j ACCEPT - inet6/filter/logaccept-1 -j ACCEPT + inet/filter/limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-64 + inet6/filter/limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-64 + inet/filter/logaccept-64 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-64 -m limit --limit 1/second -j LOG + inet/filter/logaccept-64 -j ACCEPT + inet6/filter/logaccept-64 -j ACCEPT inet/filter/limit-336 -m limit --limit 1/second -j LOG inet6/filter/limit-336 -m limit --limit 1/second -j LOG inet/filter/limit-336 -j DROP inet6/filter/limit-336 -j DROP -Filter 344 {"conn-limit":{"count":150},"log":"none","out":"B"} +Filter 632 {"conn-limit":{"count":150},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-337 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-337 @@ -4194,7 +6372,7 @@ Filter 344 {"conn-limit":{"count":150},"log":"none","out inet/filter/limit-337 -j DROP inet6/filter/limit-337 -j DROP -Filter 345 {"conn-limit":{"count":150,"log":false},"out":"B"} +Filter 633 {"conn-limit":{"count":150,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-338 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-338 @@ -4205,7 +6383,7 @@ Filter 345 {"conn-limit":{"count":150,"log":false},"out" inet/filter/limit-338 -j DROP inet6/filter/limit-338 -j DROP -Filter 346 {"action":"pass","conn-limit":{"count":150,"log":false},"out":"B"} +Filter 634 {"action":"pass","conn-limit":{"count":150,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-339 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-339 @@ -4216,22 +6394,22 @@ Filter 346 {"action":"pass","conn-limit":{"count":150,"l inet/filter/limit-339 -j DROP inet6/filter/limit-339 -j DROP -Filter 347 {"conn-limit":{"count":150,"log":false},"log":true,"out":"B"} +Filter 635 {"conn-limit":{"count":150,"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-340 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-340 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-340 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-340 - inet/filter/limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-2 - inet6/filter/limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-2 - inet/filter/logaccept-2 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-2 -m limit --limit 1/second -j LOG - inet/filter/logaccept-2 -j ACCEPT - inet6/filter/logaccept-2 -j ACCEPT + inet/filter/limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-65 + inet6/filter/limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-65 + inet/filter/logaccept-65 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-65 -m limit --limit 1/second -j LOG + inet/filter/logaccept-65 -j ACCEPT + inet6/filter/logaccept-65 -j ACCEPT inet/filter/limit-340 -j DROP inet6/filter/limit-340 -j DROP -Filter 348 {"conn-limit":{"count":150,"log":false},"log":"none","out":"B"} +Filter 636 {"conn-limit":{"count":150,"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-341 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-341 @@ -4242,7 +6420,7 @@ Filter 348 {"conn-limit":{"count":150,"log":false},"log" inet/filter/limit-341 -j DROP inet6/filter/limit-341 -j DROP -Filter 349 {"conn-limit":{"count":150,"log":"none"},"out":"B"} +Filter 637 {"conn-limit":{"count":150,"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-342 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-342 @@ -4253,7 +6431,7 @@ Filter 349 {"conn-limit":{"count":150,"log":"none"},"out inet/filter/limit-342 -j DROP inet6/filter/limit-342 -j DROP -Filter 350 {"action":"pass","conn-limit":{"count":150,"log":"none"},"out":"B"} +Filter 638 {"action":"pass","conn-limit":{"count":150,"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-343 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-343 @@ -4264,22 +6442,22 @@ Filter 350 {"action":"pass","conn-limit":{"count":150,"l inet/filter/limit-343 -j DROP inet6/filter/limit-343 -j DROP -Filter 351 {"conn-limit":{"count":150,"log":"none"},"log":true,"out":"B"} +Filter 639 {"conn-limit":{"count":150,"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-344 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-344 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-344 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-344 - inet/filter/limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-3 - inet6/filter/limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-3 - inet/filter/logaccept-3 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-3 -m limit --limit 1/second -j LOG - inet/filter/logaccept-3 -j ACCEPT - inet6/filter/logaccept-3 -j ACCEPT + inet/filter/limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-66 + inet6/filter/limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-66 + inet/filter/logaccept-66 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-66 -m limit --limit 1/second -j LOG + inet/filter/logaccept-66 -j ACCEPT + inet6/filter/logaccept-66 -j ACCEPT inet/filter/limit-344 -j DROP inet6/filter/limit-344 -j DROP -Filter 352 {"conn-limit":{"count":150,"log":"none"},"log":"none","out":"B"} +Filter 640 {"conn-limit":{"count":150,"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-345 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-345 @@ -4290,7 +6468,7 @@ Filter 352 {"conn-limit":{"count":150,"log":"none"},"log inet/filter/limit-345 -j DROP inet6/filter/limit-345 -j DROP -Filter 353 {"conn-limit":{"count":150,"interval":5},"out":"B"} +Filter 641 {"conn-limit":{"count":150,"interval":5},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-346 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-346 @@ -4303,7 +6481,7 @@ Filter 353 {"conn-limit":{"count":150,"interval":5},"out inet/filter/limit-346 -j DROP inet6/filter/limit-346 -j DROP -Filter 354 {"action":"pass","conn-limit":{"count":150,"interval":5},"out":"B"} +Filter 642 {"action":"pass","conn-limit":{"count":150,"interval":5},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-347 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-347 @@ -4316,24 +6494,24 @@ Filter 354 {"action":"pass","conn-limit":{"count":150,"i inet/filter/limit-347 -j DROP inet6/filter/limit-347 -j DROP -Filter 355 {"conn-limit":{"count":150,"interval":5},"log":true,"out":"B"} +Filter 643 {"conn-limit":{"count":150,"interval":5},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-348 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-348 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-348 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-348 - inet/filter/limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-4 - inet6/filter/limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-4 - inet/filter/logaccept-4 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-4 -m limit --limit 1/second -j LOG - inet/filter/logaccept-4 -j ACCEPT - inet6/filter/logaccept-4 -j ACCEPT + inet/filter/limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-67 + inet6/filter/limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-67 + inet/filter/logaccept-67 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-67 -m limit --limit 1/second -j LOG + inet/filter/logaccept-67 -j ACCEPT + inet6/filter/logaccept-67 -j ACCEPT inet/filter/limit-348 -m limit --limit 1/second -j LOG inet6/filter/limit-348 -m limit --limit 1/second -j LOG inet/filter/limit-348 -j DROP inet6/filter/limit-348 -j DROP -Filter 356 {"conn-limit":{"count":150,"interval":5},"log":"none","out":"B"} +Filter 644 {"conn-limit":{"count":150,"interval":5},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-349 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-349 @@ -4346,7 +6524,7 @@ Filter 356 {"conn-limit":{"count":150,"interval":5},"log inet/filter/limit-349 -j DROP inet6/filter/limit-349 -j DROP -Filter 357 {"conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} +Filter 645 {"conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-350 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-350 @@ -4357,7 +6535,7 @@ Filter 357 {"conn-limit":{"count":150,"interval":5,"log" inet/filter/limit-350 -j DROP inet6/filter/limit-350 -j DROP -Filter 358 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} +Filter 646 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-351 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-351 @@ -4368,22 +6546,22 @@ Filter 358 {"action":"pass","conn-limit":{"count":150,"i inet/filter/limit-351 -j DROP inet6/filter/limit-351 -j DROP -Filter 359 {"conn-limit":{"count":150,"interval":5,"log":false},"log":true,"out":"B"} +Filter 647 {"conn-limit":{"count":150,"interval":5,"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-352 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-352 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-352 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-352 - inet/filter/limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-5 - inet6/filter/limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-5 - inet/filter/logaccept-5 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-5 -m limit --limit 1/second -j LOG - inet/filter/logaccept-5 -j ACCEPT - inet6/filter/logaccept-5 -j ACCEPT + inet/filter/limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-68 + inet6/filter/limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-68 + inet/filter/logaccept-68 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-68 -m limit --limit 1/second -j LOG + inet/filter/logaccept-68 -j ACCEPT + inet6/filter/logaccept-68 -j ACCEPT inet/filter/limit-352 -j DROP inet6/filter/limit-352 -j DROP -Filter 360 {"conn-limit":{"count":150,"interval":5,"log":false},"log":"none","out":"B"} +Filter 648 {"conn-limit":{"count":150,"interval":5,"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-353 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-353 @@ -4394,7 +6572,7 @@ Filter 360 {"conn-limit":{"count":150,"interval":5,"log" inet/filter/limit-353 -j DROP inet6/filter/limit-353 -j DROP -Filter 361 {"conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} +Filter 649 {"conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-354 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-354 @@ -4405,7 +6583,7 @@ Filter 361 {"conn-limit":{"count":150,"interval":5,"log" inet/filter/limit-354 -j DROP inet6/filter/limit-354 -j DROP -Filter 362 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} +Filter 650 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-355 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-355 @@ -4416,22 +6594,22 @@ Filter 362 {"action":"pass","conn-limit":{"count":150,"i inet/filter/limit-355 -j DROP inet6/filter/limit-355 -j DROP -Filter 363 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":true,"out":"B"} +Filter 651 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-356 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-356 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-356 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-356 - inet/filter/limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-6 - inet6/filter/limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-6 - inet/filter/logaccept-6 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-6 -m limit --limit 1/second -j LOG - inet/filter/logaccept-6 -j ACCEPT - inet6/filter/logaccept-6 -j ACCEPT + inet/filter/limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-69 + inet6/filter/limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-69 + inet/filter/logaccept-69 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-69 -m limit --limit 1/second -j LOG + inet/filter/logaccept-69 -j ACCEPT + inet6/filter/logaccept-69 -j ACCEPT inet/filter/limit-356 -j DROP inet6/filter/limit-356 -j DROP -Filter 364 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":"none","out":"B"} +Filter 652 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-357 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-357 @@ -4442,7 +6620,7 @@ Filter 364 {"conn-limit":{"count":150,"interval":5,"log" inet/filter/limit-357 -j DROP inet6/filter/limit-357 -j DROP -Filter 365 {"flow-limit":1} +Filter 653 {"flow-limit":1} (filter-limit) inet/filter/FORWARD -j limit-358 inet6/filter/FORWARD -j limit-358 @@ -4465,7 +6643,7 @@ Filter 365 {"flow-limit":1} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 366 {"action":"pass","flow-limit":1} +Filter 654 {"action":"pass","flow-limit":1} (filter-limit) inet/filter/FORWARD -j limit-359 inet6/filter/FORWARD -j limit-359 @@ -4482,7 +6660,7 @@ Filter 366 {"action":"pass","flow-limit":1} inet/filter/limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --set inet6/filter/limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 367 {"flow-limit":1,"log":true} +Filter 655 {"flow-limit":1,"log":true} (filter-limit) inet/filter/FORWARD -j limit-360 inet6/filter/FORWARD -j limit-360 @@ -4509,7 +6687,7 @@ Filter 367 {"flow-limit":1,"log":true} inet/filter/logaccept-final-0 -j ACCEPT inet6/filter/logaccept-final-0 -j ACCEPT -Filter 368 {"action":"pass","flow-limit":1,"log":true} +Filter 656 {"action":"pass","flow-limit":1,"log":true} (filter-limit) inet/filter/FORWARD -j limit-361 inet6/filter/FORWARD -j limit-361 @@ -4526,7 +6704,7 @@ Filter 368 {"action":"pass","flow-limit":1,"log":true} inet/filter/limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 369 {"flow-limit":1,"log":"none"} +Filter 657 {"flow-limit":1,"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-362 inet6/filter/FORWARD -j limit-362 @@ -4549,7 +6727,7 @@ Filter 369 {"flow-limit":1,"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 370 {"action":"pass","flow-limit":1,"log":"none"} +Filter 658 {"action":"pass","flow-limit":1,"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-363 inet6/filter/FORWARD -j limit-363 @@ -4566,7 +6744,7 @@ Filter 370 {"action":"pass","flow-limit":1,"log":"none"} inet/filter/limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --set inet6/filter/limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 371 {"flow-limit":{}} +Filter 659 {"flow-limit":{}} (filter-limit) inet/filter/FORWARD -j limit-364 inet6/filter/FORWARD -j limit-364 @@ -4589,7 +6767,7 @@ Filter 371 {"flow-limit":{}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 372 {"action":"pass","flow-limit":{}} +Filter 660 {"action":"pass","flow-limit":{}} (filter-limit) inet/filter/FORWARD -j limit-365 inet6/filter/FORWARD -j limit-365 @@ -4606,7 +6784,7 @@ Filter 372 {"action":"pass","flow-limit":{}} inet/filter/limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --set inet6/filter/limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 373 {"flow-limit":{},"log":true} +Filter 661 {"flow-limit":{},"log":true} (filter-limit) inet/filter/FORWARD -j limit-366 inet6/filter/FORWARD -j limit-366 @@ -4633,7 +6811,7 @@ Filter 373 {"flow-limit":{},"log":true} inet/filter/logaccept-final-1 -j ACCEPT inet6/filter/logaccept-final-1 -j ACCEPT -Filter 374 {"action":"pass","flow-limit":{},"log":true} +Filter 662 {"action":"pass","flow-limit":{},"log":true} (filter-limit) inet/filter/FORWARD -j limit-367 inet6/filter/FORWARD -j limit-367 @@ -4650,7 +6828,7 @@ Filter 374 {"action":"pass","flow-limit":{},"log":true} inet/filter/limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 375 {"flow-limit":{},"log":"none"} +Filter 663 {"flow-limit":{},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-368 inet6/filter/FORWARD -j limit-368 @@ -4673,7 +6851,7 @@ Filter 375 {"flow-limit":{},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 376 {"action":"pass","flow-limit":{},"log":"none"} +Filter 664 {"action":"pass","flow-limit":{},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-369 inet6/filter/FORWARD -j limit-369 @@ -4690,7 +6868,7 @@ Filter 376 {"action":"pass","flow-limit":{},"log":"none" inet/filter/limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --set inet6/filter/limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 377 {"flow-limit":{"name":"A"}} +Filter 665 {"flow-limit":{"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-370 inet6/filter/FORWARD -j limit-370 @@ -4713,7 +6891,7 @@ Filter 377 {"flow-limit":{"name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 378 {"action":"pass","flow-limit":{"name":"A"}} +Filter 666 {"action":"pass","flow-limit":{"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-371 inet6/filter/FORWARD -j limit-371 @@ -4730,7 +6908,7 @@ Filter 378 {"action":"pass","flow-limit":{"name":"A"}} inet/filter/limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 379 {"flow-limit":{"name":"A"},"log":true} +Filter 667 {"flow-limit":{"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-372 inet6/filter/FORWARD -j limit-372 @@ -4757,7 +6935,7 @@ Filter 379 {"flow-limit":{"name":"A"},"log":true} inet/filter/logaccept-final-2 -j ACCEPT inet6/filter/logaccept-final-2 -j ACCEPT -Filter 380 {"action":"pass","flow-limit":{"name":"A"},"log":true} +Filter 668 {"action":"pass","flow-limit":{"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-373 inet6/filter/FORWARD -j limit-373 @@ -4774,7 +6952,7 @@ Filter 380 {"action":"pass","flow-limit":{"name":"A"},"l inet/filter/limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 381 {"flow-limit":{"name":"A"},"log":"none"} +Filter 669 {"flow-limit":{"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-374 inet6/filter/FORWARD -j limit-374 @@ -4797,7 +6975,7 @@ Filter 381 {"flow-limit":{"name":"A"},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 382 {"action":"pass","flow-limit":{"name":"A"},"log":"none"} +Filter 670 {"action":"pass","flow-limit":{"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-375 inet6/filter/FORWARD -j limit-375 @@ -4814,7 +6992,7 @@ Filter 382 {"action":"pass","flow-limit":{"name":"A"},"l inet/filter/limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 383 {"flow-limit":{"name":"A","update":false}} +Filter 671 {"flow-limit":{"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-376 inet6/filter/FORWARD -j limit-376 @@ -4835,7 +7013,7 @@ Filter 383 {"flow-limit":{"name":"A","update":false}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 384 {"action":"pass","flow-limit":{"name":"A","update":false}} +Filter 672 {"action":"pass","flow-limit":{"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-377 inet6/filter/FORWARD -j limit-377 @@ -4850,7 +7028,7 @@ Filter 384 {"action":"pass","flow-limit":{"name":"A","up inet/filter/logdrop-134 -j DROP inet6/filter/logdrop-134 -j DROP -Filter 385 {"flow-limit":{"name":"A","update":false},"log":true} +Filter 673 {"flow-limit":{"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-378 inet6/filter/FORWARD -j limit-378 @@ -4875,7 +7053,7 @@ Filter 385 {"flow-limit":{"name":"A","update":false},"lo inet/filter/logaccept-final-3 -j ACCEPT inet6/filter/logaccept-final-3 -j ACCEPT -Filter 386 {"action":"pass","flow-limit":{"name":"A","update":false},"log":true} +Filter 674 {"action":"pass","flow-limit":{"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-379 inet6/filter/FORWARD -j limit-379 @@ -4892,7 +7070,7 @@ Filter 386 {"action":"pass","flow-limit":{"name":"A","up inet/filter/limit-379 -m limit --limit 1/second -j LOG inet6/filter/limit-379 -m limit --limit 1/second -j LOG -Filter 387 {"flow-limit":{"name":"A","update":false},"log":"none"} +Filter 675 {"flow-limit":{"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-380 inet6/filter/FORWARD -j limit-380 @@ -4913,7 +7091,7 @@ Filter 387 {"flow-limit":{"name":"A","update":false},"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 388 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"none"} +Filter 676 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-381 inet6/filter/FORWARD -j limit-381 @@ -4928,7 +7106,7 @@ Filter 388 {"action":"pass","flow-limit":{"name":"A","up inet/filter/logdrop-138 -j DROP inet6/filter/logdrop-138 -j DROP -Filter 389 {"flow-limit":{"addr":"dest","name":"A"}} +Filter 677 {"flow-limit":{"addr":"dest","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-382 inet6/filter/FORWARD -j limit-382 @@ -4951,7 +7129,7 @@ Filter 389 {"flow-limit":{"addr":"dest","name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 390 {"action":"pass","flow-limit":{"addr":"dest","name":"A"}} +Filter 678 {"action":"pass","flow-limit":{"addr":"dest","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-383 inet6/filter/FORWARD -j limit-383 @@ -4968,7 +7146,7 @@ Filter 390 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 391 {"flow-limit":{"addr":"dest","name":"A"},"log":true} +Filter 679 {"flow-limit":{"addr":"dest","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-384 inet6/filter/FORWARD -j limit-384 @@ -4995,7 +7173,7 @@ Filter 391 {"flow-limit":{"addr":"dest","name":"A"},"log inet/filter/logaccept-final-4 -j ACCEPT inet6/filter/logaccept-final-4 -j ACCEPT -Filter 392 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":true} +Filter 680 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-385 inet6/filter/FORWARD -j limit-385 @@ -5012,7 +7190,7 @@ Filter 392 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 393 {"flow-limit":{"addr":"dest","name":"A"},"log":"none"} +Filter 681 {"flow-limit":{"addr":"dest","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-386 inet6/filter/FORWARD -j limit-386 @@ -5035,7 +7213,7 @@ Filter 393 {"flow-limit":{"addr":"dest","name":"A"},"log inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 394 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"none"} +Filter 682 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-387 inet6/filter/FORWARD -j limit-387 @@ -5052,7 +7230,7 @@ Filter 394 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 395 {"flow-limit":{"addr":"dest","name":"A","update":false}} +Filter 683 {"flow-limit":{"addr":"dest","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-388 inet6/filter/FORWARD -j limit-388 @@ -5073,7 +7251,7 @@ Filter 395 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 396 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false}} +Filter 684 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-389 inet6/filter/FORWARD -j limit-389 @@ -5088,7 +7266,7 @@ Filter 396 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/logdrop-146 -j DROP inet6/filter/logdrop-146 -j DROP -Filter 397 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +Filter 685 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-390 inet6/filter/FORWARD -j limit-390 @@ -5113,7 +7291,7 @@ Filter 397 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/logaccept-final-5 -j ACCEPT inet6/filter/logaccept-final-5 -j ACCEPT -Filter 398 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +Filter 686 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-391 inet6/filter/FORWARD -j limit-391 @@ -5130,7 +7308,7 @@ Filter 398 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-391 -m limit --limit 1/second -j LOG inet6/filter/limit-391 -m limit --limit 1/second -j LOG -Filter 399 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} +Filter 687 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-392 inet6/filter/FORWARD -j limit-392 @@ -5151,7 +7329,7 @@ Filter 399 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 400 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} +Filter 688 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-393 inet6/filter/FORWARD -j limit-393 @@ -5166,7 +7344,7 @@ Filter 400 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/logdrop-150 -j DROP inet6/filter/logdrop-150 -j DROP -Filter 401 {"flow-limit":{"name":"C"}} +Filter 689 {"flow-limit":{"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-394 inet6/filter/FORWARD -j limit-394 @@ -5189,7 +7367,7 @@ Filter 401 {"flow-limit":{"name":"C"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 402 {"action":"pass","flow-limit":{"name":"C"}} +Filter 690 {"action":"pass","flow-limit":{"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-395 inet6/filter/FORWARD -j limit-395 @@ -5206,7 +7384,7 @@ Filter 402 {"action":"pass","flow-limit":{"name":"C"}} inet/filter/limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-395 -m recent --name user:C --rsource --mask fe00:: --set -Filter 403 {"flow-limit":{"name":"C"},"log":true} +Filter 691 {"flow-limit":{"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-396 inet6/filter/FORWARD -j limit-396 @@ -5233,7 +7411,7 @@ Filter 403 {"flow-limit":{"name":"C"},"log":true} inet/filter/logaccept-final-6 -j ACCEPT inet6/filter/logaccept-final-6 -j ACCEPT -Filter 404 {"action":"pass","flow-limit":{"name":"C"},"log":true} +Filter 692 {"action":"pass","flow-limit":{"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-397 inet6/filter/FORWARD -j limit-397 @@ -5250,7 +7428,7 @@ Filter 404 {"action":"pass","flow-limit":{"name":"C"},"l inet/filter/limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-397 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 405 {"flow-limit":{"name":"C"},"log":"none"} +Filter 693 {"flow-limit":{"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-398 inet6/filter/FORWARD -j limit-398 @@ -5273,7 +7451,7 @@ Filter 405 {"flow-limit":{"name":"C"},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 406 {"action":"pass","flow-limit":{"name":"C"},"log":"none"} +Filter 694 {"action":"pass","flow-limit":{"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-399 inet6/filter/FORWARD -j limit-399 @@ -5290,7 +7468,7 @@ Filter 406 {"action":"pass","flow-limit":{"name":"C"},"l inet/filter/limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-399 -m recent --name user:C --rsource --mask fe00:: --set -Filter 407 {"flow-limit":{"name":"C","update":false}} +Filter 695 {"flow-limit":{"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-400 inet6/filter/FORWARD -j limit-400 @@ -5311,7 +7489,7 @@ Filter 407 {"flow-limit":{"name":"C","update":false}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 408 {"action":"pass","flow-limit":{"name":"C","update":false}} +Filter 696 {"action":"pass","flow-limit":{"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-401 inet6/filter/FORWARD -j limit-401 @@ -5326,7 +7504,7 @@ Filter 408 {"action":"pass","flow-limit":{"name":"C","up inet/filter/logdrop-158 -j DROP inet6/filter/logdrop-158 -j DROP -Filter 409 {"flow-limit":{"name":"C","update":false},"log":true} +Filter 697 {"flow-limit":{"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-402 inet6/filter/FORWARD -j limit-402 @@ -5351,7 +7529,7 @@ Filter 409 {"flow-limit":{"name":"C","update":false},"lo inet/filter/logaccept-final-7 -j ACCEPT inet6/filter/logaccept-final-7 -j ACCEPT -Filter 410 {"action":"pass","flow-limit":{"name":"C","update":false},"log":true} +Filter 698 {"action":"pass","flow-limit":{"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-403 inet6/filter/FORWARD -j limit-403 @@ -5368,7 +7546,7 @@ Filter 410 {"action":"pass","flow-limit":{"name":"C","up inet/filter/limit-403 -m limit --limit 1/second -j LOG inet6/filter/limit-403 -m limit --limit 1/second -j LOG -Filter 411 {"flow-limit":{"name":"C","update":false},"log":"none"} +Filter 699 {"flow-limit":{"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-404 inet6/filter/FORWARD -j limit-404 @@ -5389,7 +7567,7 @@ Filter 411 {"flow-limit":{"name":"C","update":false},"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 412 {"action":"pass","flow-limit":{"name":"C","update":false},"log":"none"} +Filter 700 {"action":"pass","flow-limit":{"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-405 inet6/filter/FORWARD -j limit-405 @@ -5404,7 +7582,7 @@ Filter 412 {"action":"pass","flow-limit":{"name":"C","up inet/filter/logdrop-162 -j DROP inet6/filter/logdrop-162 -j DROP -Filter 413 {"flow-limit":{"addr":"dest","name":"C"}} +Filter 701 {"flow-limit":{"addr":"dest","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-406 inet6/filter/FORWARD -j limit-406 @@ -5427,7 +7605,7 @@ Filter 413 {"flow-limit":{"addr":"dest","name":"C"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 414 {"action":"pass","flow-limit":{"addr":"dest","name":"C"}} +Filter 702 {"action":"pass","flow-limit":{"addr":"dest","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-407 inet6/filter/FORWARD -j limit-407 @@ -5444,7 +7622,7 @@ Filter 414 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-407 -m recent --name user:C --rdest --mask fe00:: --set -Filter 415 {"flow-limit":{"addr":"dest","name":"C"},"log":true} +Filter 703 {"flow-limit":{"addr":"dest","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-408 inet6/filter/FORWARD -j limit-408 @@ -5471,7 +7649,7 @@ Filter 415 {"flow-limit":{"addr":"dest","name":"C"},"log inet/filter/logaccept-final-8 -j ACCEPT inet6/filter/logaccept-final-8 -j ACCEPT -Filter 416 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":true} +Filter 704 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-409 inet6/filter/FORWARD -j limit-409 @@ -5488,7 +7666,7 @@ Filter 416 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-409 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 417 {"flow-limit":{"addr":"dest","name":"C"},"log":"none"} +Filter 705 {"flow-limit":{"addr":"dest","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-410 inet6/filter/FORWARD -j limit-410 @@ -5511,7 +7689,7 @@ Filter 417 {"flow-limit":{"addr":"dest","name":"C"},"log inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 418 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":"none"} +Filter 706 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-411 inet6/filter/FORWARD -j limit-411 @@ -5528,7 +7706,7 @@ Filter 418 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-411 -m recent --name user:C --rdest --mask fe00:: --set -Filter 419 {"flow-limit":{"addr":"dest","name":"C","update":false}} +Filter 707 {"flow-limit":{"addr":"dest","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-412 inet6/filter/FORWARD -j limit-412 @@ -5549,7 +7727,7 @@ Filter 419 {"flow-limit":{"addr":"dest","name":"C","upda inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 420 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false}} +Filter 708 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-413 inet6/filter/FORWARD -j limit-413 @@ -5564,7 +7742,7 @@ Filter 420 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/logdrop-170 -j DROP inet6/filter/logdrop-170 -j DROP -Filter 421 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":true} +Filter 709 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-414 inet6/filter/FORWARD -j limit-414 @@ -5589,7 +7767,7 @@ Filter 421 {"flow-limit":{"addr":"dest","name":"C","upda inet/filter/logaccept-final-9 -j ACCEPT inet6/filter/logaccept-final-9 -j ACCEPT -Filter 422 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":true} +Filter 710 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-415 inet6/filter/FORWARD -j limit-415 @@ -5606,7 +7784,7 @@ Filter 422 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-415 -m limit --limit 1/second -j LOG inet6/filter/limit-415 -m limit --limit 1/second -j LOG -Filter 423 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} +Filter 711 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-416 inet6/filter/FORWARD -j limit-416 @@ -5627,7 +7805,7 @@ Filter 423 {"flow-limit":{"addr":"dest","name":"C","upda inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 424 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} +Filter 712 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-417 inet6/filter/FORWARD -j limit-417 @@ -5642,7 +7820,7 @@ Filter 424 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/logdrop-174 -j DROP inet6/filter/logdrop-174 -j DROP -Filter 425 {"flow-limit":{"log":false}} +Filter 713 {"flow-limit":{"log":false}} (filter-limit) inet/filter/FORWARD -j limit-418 inet6/filter/FORWARD -j limit-418 @@ -5661,7 +7839,7 @@ Filter 425 {"flow-limit":{"log":false}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 426 {"action":"pass","flow-limit":{"log":false}} +Filter 714 {"action":"pass","flow-limit":{"log":false}} (filter-limit) inet/filter/FORWARD -j limit-419 inet6/filter/FORWARD -j limit-419 @@ -5674,7 +7852,7 @@ Filter 426 {"action":"pass","flow-limit":{"log":false}} inet/filter/limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --set inet6/filter/limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 427 {"flow-limit":{"log":false},"log":true} +Filter 715 {"flow-limit":{"log":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-420 inet6/filter/FORWARD -j limit-420 @@ -5697,7 +7875,7 @@ Filter 427 {"flow-limit":{"log":false},"log":true} inet/filter/logaccept-final-10 -j ACCEPT inet6/filter/logaccept-final-10 -j ACCEPT -Filter 428 {"action":"pass","flow-limit":{"log":false},"log":true} +Filter 716 {"action":"pass","flow-limit":{"log":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-421 inet6/filter/FORWARD -j limit-421 @@ -5710,7 +7888,7 @@ Filter 428 {"action":"pass","flow-limit":{"log":false}," inet/filter/limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 429 {"flow-limit":{"log":false},"log":"none"} +Filter 717 {"flow-limit":{"log":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-422 inet6/filter/FORWARD -j limit-422 @@ -5729,7 +7907,7 @@ Filter 429 {"flow-limit":{"log":false},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 430 {"action":"pass","flow-limit":{"log":false},"log":"none"} +Filter 718 {"action":"pass","flow-limit":{"log":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-423 inet6/filter/FORWARD -j limit-423 @@ -5742,7 +7920,7 @@ Filter 430 {"action":"pass","flow-limit":{"log":false}," inet/filter/limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --set inet6/filter/limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 431 {"flow-limit":{"log":false,"name":"A"}} +Filter 719 {"flow-limit":{"log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-424 inet6/filter/FORWARD -j limit-424 @@ -5761,7 +7939,7 @@ Filter 431 {"flow-limit":{"log":false,"name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 432 {"action":"pass","flow-limit":{"log":false,"name":"A"}} +Filter 720 {"action":"pass","flow-limit":{"log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-425 inet6/filter/FORWARD -j limit-425 @@ -5774,7 +7952,7 @@ Filter 432 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 433 {"flow-limit":{"log":false,"name":"A"},"log":true} +Filter 721 {"flow-limit":{"log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-426 inet6/filter/FORWARD -j limit-426 @@ -5797,7 +7975,7 @@ Filter 433 {"flow-limit":{"log":false,"name":"A"},"log": inet/filter/logaccept-final-11 -j ACCEPT inet6/filter/logaccept-final-11 -j ACCEPT -Filter 434 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":true} +Filter 722 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-427 inet6/filter/FORWARD -j limit-427 @@ -5810,7 +7988,7 @@ Filter 434 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 435 {"flow-limit":{"log":false,"name":"A"},"log":"none"} +Filter 723 {"flow-limit":{"log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-428 inet6/filter/FORWARD -j limit-428 @@ -5829,7 +8007,7 @@ Filter 435 {"flow-limit":{"log":false,"name":"A"},"log": inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 436 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"none"} +Filter 724 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-429 inet6/filter/FORWARD -j limit-429 @@ -5842,7 +8020,7 @@ Filter 436 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 437 {"flow-limit":{"log":false,"name":"A","update":false}} +Filter 725 {"flow-limit":{"log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-430 inet6/filter/FORWARD -j limit-430 @@ -5859,7 +8037,7 @@ Filter 437 {"flow-limit":{"log":false,"name":"A","update inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 438 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false}} +Filter 726 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-431 inet6/filter/FORWARD -j limit-431 @@ -5870,7 +8048,7 @@ Filter 438 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-431 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-431 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 439 {"flow-limit":{"log":false,"name":"A","update":false},"log":true} +Filter 727 {"flow-limit":{"log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-432 inet6/filter/FORWARD -j limit-432 @@ -5891,7 +8069,7 @@ Filter 439 {"flow-limit":{"log":false,"name":"A","update inet/filter/logaccept-final-12 -j ACCEPT inet6/filter/logaccept-final-12 -j ACCEPT -Filter 440 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":true} +Filter 728 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-433 inet6/filter/FORWARD -j limit-433 @@ -5904,7 +8082,7 @@ Filter 440 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-433 -m limit --limit 1/second -j LOG inet6/filter/limit-433 -m limit --limit 1/second -j LOG -Filter 441 {"flow-limit":{"log":false,"name":"A","update":false},"log":"none"} +Filter 729 {"flow-limit":{"log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-434 inet6/filter/FORWARD -j limit-434 @@ -5921,7 +8099,7 @@ Filter 441 {"flow-limit":{"log":false,"name":"A","update inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 442 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"none"} +Filter 730 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-435 inet6/filter/FORWARD -j limit-435 @@ -5932,7 +8110,7 @@ Filter 442 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-435 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-435 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 443 {"flow-limit":{"addr":"dest","log":false,"name":"A"}} +Filter 731 {"flow-limit":{"addr":"dest","log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-436 inet6/filter/FORWARD -j limit-436 @@ -5951,7 +8129,7 @@ Filter 443 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 444 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"}} +Filter 732 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-437 inet6/filter/FORWARD -j limit-437 @@ -5964,7 +8142,7 @@ Filter 444 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 445 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} +Filter 733 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-438 inet6/filter/FORWARD -j limit-438 @@ -5987,7 +8165,7 @@ Filter 445 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/logaccept-final-13 -j ACCEPT inet6/filter/logaccept-final-13 -j ACCEPT -Filter 446 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} +Filter 734 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-439 inet6/filter/FORWARD -j limit-439 @@ -6000,7 +8178,7 @@ Filter 446 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 447 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} +Filter 735 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-440 inet6/filter/FORWARD -j limit-440 @@ -6019,7 +8197,7 @@ Filter 447 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 448 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} +Filter 736 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-441 inet6/filter/FORWARD -j limit-441 @@ -6032,7 +8210,7 @@ Filter 448 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 449 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} +Filter 737 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-442 inet6/filter/FORWARD -j limit-442 @@ -6049,7 +8227,7 @@ Filter 449 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 450 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} +Filter 738 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-443 inet6/filter/FORWARD -j limit-443 @@ -6060,7 +8238,7 @@ Filter 450 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-443 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 451 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} +Filter 739 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-444 inet6/filter/FORWARD -j limit-444 @@ -6081,7 +8259,7 @@ Filter 451 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/logaccept-final-14 -j ACCEPT inet6/filter/logaccept-final-14 -j ACCEPT -Filter 452 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} +Filter 740 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-445 inet6/filter/FORWARD -j limit-445 @@ -6094,7 +8272,7 @@ Filter 452 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-445 -m limit --limit 1/second -j LOG inet6/filter/limit-445 -m limit --limit 1/second -j LOG -Filter 453 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} +Filter 741 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-446 inet6/filter/FORWARD -j limit-446 @@ -6111,7 +8289,7 @@ Filter 453 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 454 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} +Filter 742 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-447 inet6/filter/FORWARD -j limit-447 @@ -6122,7 +8300,7 @@ Filter 454 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-447 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 455 {"flow-limit":{"log":false,"name":"C"}} +Filter 743 {"flow-limit":{"log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-448 inet6/filter/FORWARD -j limit-448 @@ -6141,7 +8319,7 @@ Filter 455 {"flow-limit":{"log":false,"name":"C"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 456 {"action":"pass","flow-limit":{"log":false,"name":"C"}} +Filter 744 {"action":"pass","flow-limit":{"log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-449 inet6/filter/FORWARD -j limit-449 @@ -6154,7 +8332,7 @@ Filter 456 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-449 -m recent --name user:C --rsource --mask fe00:: --set -Filter 457 {"flow-limit":{"log":false,"name":"C"},"log":true} +Filter 745 {"flow-limit":{"log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-450 inet6/filter/FORWARD -j limit-450 @@ -6177,7 +8355,7 @@ Filter 457 {"flow-limit":{"log":false,"name":"C"},"log": inet/filter/logaccept-final-15 -j ACCEPT inet6/filter/logaccept-final-15 -j ACCEPT -Filter 458 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":true} +Filter 746 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-451 inet6/filter/FORWARD -j limit-451 @@ -6190,7 +8368,7 @@ Filter 458 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-451 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 459 {"flow-limit":{"log":false,"name":"C"},"log":"none"} +Filter 747 {"flow-limit":{"log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-452 inet6/filter/FORWARD -j limit-452 @@ -6209,7 +8387,7 @@ Filter 459 {"flow-limit":{"log":false,"name":"C"},"log": inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 460 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":"none"} +Filter 748 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-453 inet6/filter/FORWARD -j limit-453 @@ -6222,7 +8400,7 @@ Filter 460 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-453 -m recent --name user:C --rsource --mask fe00:: --set -Filter 461 {"flow-limit":{"log":false,"name":"C","update":false}} +Filter 749 {"flow-limit":{"log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-454 inet6/filter/FORWARD -j limit-454 @@ -6239,7 +8417,7 @@ Filter 461 {"flow-limit":{"log":false,"name":"C","update inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 462 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false}} +Filter 750 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-455 inet6/filter/FORWARD -j limit-455 @@ -6250,7 +8428,7 @@ Filter 462 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-455 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-455 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 463 {"flow-limit":{"log":false,"name":"C","update":false},"log":true} +Filter 751 {"flow-limit":{"log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-456 inet6/filter/FORWARD -j limit-456 @@ -6271,7 +8449,7 @@ Filter 463 {"flow-limit":{"log":false,"name":"C","update inet/filter/logaccept-final-16 -j ACCEPT inet6/filter/logaccept-final-16 -j ACCEPT -Filter 464 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":true} +Filter 752 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-457 inet6/filter/FORWARD -j limit-457 @@ -6284,7 +8462,7 @@ Filter 464 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-457 -m limit --limit 1/second -j LOG inet6/filter/limit-457 -m limit --limit 1/second -j LOG -Filter 465 {"flow-limit":{"log":false,"name":"C","update":false},"log":"none"} +Filter 753 {"flow-limit":{"log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-458 inet6/filter/FORWARD -j limit-458 @@ -6301,7 +8479,7 @@ Filter 465 {"flow-limit":{"log":false,"name":"C","update inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 466 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":"none"} +Filter 754 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-459 inet6/filter/FORWARD -j limit-459 @@ -6312,7 +8490,7 @@ Filter 466 {"action":"pass","flow-limit":{"log":false,"n inet/filter/limit-459 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-459 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 467 {"flow-limit":{"addr":"dest","log":false,"name":"C"}} +Filter 755 {"flow-limit":{"addr":"dest","log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-460 inet6/filter/FORWARD -j limit-460 @@ -6331,7 +8509,7 @@ Filter 467 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 468 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"}} +Filter 756 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-461 inet6/filter/FORWARD -j limit-461 @@ -6344,7 +8522,7 @@ Filter 468 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-461 -m recent --name user:C --rdest --mask fe00:: --set -Filter 469 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} +Filter 757 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-462 inet6/filter/FORWARD -j limit-462 @@ -6367,7 +8545,7 @@ Filter 469 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/logaccept-final-17 -j ACCEPT inet6/filter/logaccept-final-17 -j ACCEPT -Filter 470 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} +Filter 758 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-463 inet6/filter/FORWARD -j limit-463 @@ -6380,7 +8558,7 @@ Filter 470 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-463 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 471 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} +Filter 759 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-464 inet6/filter/FORWARD -j limit-464 @@ -6399,7 +8577,7 @@ Filter 471 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 472 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} +Filter 760 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-465 inet6/filter/FORWARD -j limit-465 @@ -6412,7 +8590,7 @@ Filter 472 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-465 -m recent --name user:C --rdest --mask fe00:: --set -Filter 473 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} +Filter 761 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-466 inet6/filter/FORWARD -j limit-466 @@ -6429,7 +8607,7 @@ Filter 473 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 474 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} +Filter 762 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-467 inet6/filter/FORWARD -j limit-467 @@ -6440,7 +8618,7 @@ Filter 474 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-467 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-467 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 475 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} +Filter 763 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-468 inet6/filter/FORWARD -j limit-468 @@ -6461,7 +8639,7 @@ Filter 475 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/logaccept-final-18 -j ACCEPT inet6/filter/logaccept-final-18 -j ACCEPT -Filter 476 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} +Filter 764 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-469 inet6/filter/FORWARD -j limit-469 @@ -6474,7 +8652,7 @@ Filter 476 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-469 -m limit --limit 1/second -j LOG inet6/filter/limit-469 -m limit --limit 1/second -j LOG -Filter 477 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} +Filter 765 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-470 inet6/filter/FORWARD -j limit-470 @@ -6491,7 +8669,7 @@ Filter 477 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 478 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} +Filter 766 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-471 inet6/filter/FORWARD -j limit-471 @@ -6502,7 +8680,7 @@ Filter 478 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-471 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-471 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 479 {"flow-limit":{"log":"none"}} +Filter 767 {"flow-limit":{"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-472 inet6/filter/FORWARD -j limit-472 @@ -6521,7 +8699,7 @@ Filter 479 {"flow-limit":{"log":"none"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 480 {"action":"pass","flow-limit":{"log":"none"}} +Filter 768 {"action":"pass","flow-limit":{"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-473 inet6/filter/FORWARD -j limit-473 @@ -6534,7 +8712,7 @@ Filter 480 {"action":"pass","flow-limit":{"log":"none"}} inet/filter/limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --set inet6/filter/limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 481 {"flow-limit":{"log":"none"},"log":true} +Filter 769 {"flow-limit":{"log":"none"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-474 inet6/filter/FORWARD -j limit-474 @@ -6557,7 +8735,7 @@ Filter 481 {"flow-limit":{"log":"none"},"log":true} inet/filter/logaccept-final-19 -j ACCEPT inet6/filter/logaccept-final-19 -j ACCEPT -Filter 482 {"action":"pass","flow-limit":{"log":"none"},"log":true} +Filter 770 {"action":"pass","flow-limit":{"log":"none"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-475 inet6/filter/FORWARD -j limit-475 @@ -6570,7 +8748,7 @@ Filter 482 {"action":"pass","flow-limit":{"log":"none"}, inet/filter/limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 483 {"flow-limit":{"log":"none"},"log":"none"} +Filter 771 {"flow-limit":{"log":"none"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-476 inet6/filter/FORWARD -j limit-476 @@ -6589,7 +8767,7 @@ Filter 483 {"flow-limit":{"log":"none"},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 484 {"action":"pass","flow-limit":{"log":"none"},"log":"none"} +Filter 772 {"action":"pass","flow-limit":{"log":"none"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-477 inet6/filter/FORWARD -j limit-477 @@ -6602,7 +8780,7 @@ Filter 484 {"action":"pass","flow-limit":{"log":"none"}, inet/filter/limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --set inet6/filter/limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 485 {"flow-limit":{"log":"none","name":"A"}} +Filter 773 {"flow-limit":{"log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-478 inet6/filter/FORWARD -j limit-478 @@ -6621,7 +8799,7 @@ Filter 485 {"flow-limit":{"log":"none","name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 486 {"action":"pass","flow-limit":{"log":"none","name":"A"}} +Filter 774 {"action":"pass","flow-limit":{"log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-479 inet6/filter/FORWARD -j limit-479 @@ -6634,7 +8812,7 @@ Filter 486 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 487 {"flow-limit":{"log":"none","name":"A"},"log":true} +Filter 775 {"flow-limit":{"log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-480 inet6/filter/FORWARD -j limit-480 @@ -6657,7 +8835,7 @@ Filter 487 {"flow-limit":{"log":"none","name":"A"},"log" inet/filter/logaccept-final-20 -j ACCEPT inet6/filter/logaccept-final-20 -j ACCEPT -Filter 488 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":true} +Filter 776 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-481 inet6/filter/FORWARD -j limit-481 @@ -6670,7 +8848,7 @@ Filter 488 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 489 {"flow-limit":{"log":"none","name":"A"},"log":"none"} +Filter 777 {"flow-limit":{"log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-482 inet6/filter/FORWARD -j limit-482 @@ -6689,7 +8867,7 @@ Filter 489 {"flow-limit":{"log":"none","name":"A"},"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 490 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"none"} +Filter 778 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-483 inet6/filter/FORWARD -j limit-483 @@ -6702,7 +8880,7 @@ Filter 490 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 491 {"flow-limit":{"log":"none","name":"A","update":false}} +Filter 779 {"flow-limit":{"log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-484 inet6/filter/FORWARD -j limit-484 @@ -6719,7 +8897,7 @@ Filter 491 {"flow-limit":{"log":"none","name":"A","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 492 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false}} +Filter 780 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-485 inet6/filter/FORWARD -j limit-485 @@ -6730,7 +8908,7 @@ Filter 492 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-485 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-485 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 493 {"flow-limit":{"log":"none","name":"A","update":false},"log":true} +Filter 781 {"flow-limit":{"log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-486 inet6/filter/FORWARD -j limit-486 @@ -6751,7 +8929,7 @@ Filter 493 {"flow-limit":{"log":"none","name":"A","updat inet/filter/logaccept-final-21 -j ACCEPT inet6/filter/logaccept-final-21 -j ACCEPT -Filter 494 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":true} +Filter 782 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-487 inet6/filter/FORWARD -j limit-487 @@ -6764,7 +8942,7 @@ Filter 494 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-487 -m limit --limit 1/second -j LOG inet6/filter/limit-487 -m limit --limit 1/second -j LOG -Filter 495 {"flow-limit":{"log":"none","name":"A","update":false},"log":"none"} +Filter 783 {"flow-limit":{"log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-488 inet6/filter/FORWARD -j limit-488 @@ -6781,7 +8959,7 @@ Filter 495 {"flow-limit":{"log":"none","name":"A","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 496 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"none"} +Filter 784 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-489 inet6/filter/FORWARD -j limit-489 @@ -6792,7 +8970,7 @@ Filter 496 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-489 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 497 {"flow-limit":{"addr":"dest","log":"none","name":"A"}} +Filter 785 {"flow-limit":{"addr":"dest","log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-490 inet6/filter/FORWARD -j limit-490 @@ -6811,7 +8989,7 @@ Filter 497 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 498 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"}} +Filter 786 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-491 inet6/filter/FORWARD -j limit-491 @@ -6824,7 +9002,7 @@ Filter 498 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 499 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} +Filter 787 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-492 inet6/filter/FORWARD -j limit-492 @@ -6847,7 +9025,7 @@ Filter 499 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/logaccept-final-22 -j ACCEPT inet6/filter/logaccept-final-22 -j ACCEPT -Filter 500 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} +Filter 788 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-493 inet6/filter/FORWARD -j limit-493 @@ -6860,7 +9038,7 @@ Filter 500 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 501 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} +Filter 789 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-494 inet6/filter/FORWARD -j limit-494 @@ -6879,7 +9057,7 @@ Filter 501 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 502 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} +Filter 790 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-495 inet6/filter/FORWARD -j limit-495 @@ -6892,7 +9070,7 @@ Filter 502 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 503 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} +Filter 791 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-496 inet6/filter/FORWARD -j limit-496 @@ -6909,7 +9087,7 @@ Filter 503 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 504 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} +Filter 792 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-497 inet6/filter/FORWARD -j limit-497 @@ -6920,7 +9098,7 @@ Filter 504 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-497 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 505 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} +Filter 793 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-498 inet6/filter/FORWARD -j limit-498 @@ -6941,7 +9119,7 @@ Filter 505 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/logaccept-final-23 -j ACCEPT inet6/filter/logaccept-final-23 -j ACCEPT -Filter 506 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} +Filter 794 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-499 inet6/filter/FORWARD -j limit-499 @@ -6954,7 +9132,7 @@ Filter 506 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-499 -m limit --limit 1/second -j LOG inet6/filter/limit-499 -m limit --limit 1/second -j LOG -Filter 507 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} +Filter 795 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-500 inet6/filter/FORWARD -j limit-500 @@ -6971,7 +9149,7 @@ Filter 507 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 508 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} +Filter 796 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-501 inet6/filter/FORWARD -j limit-501 @@ -6982,7 +9160,7 @@ Filter 508 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-501 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-501 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 509 {"flow-limit":{"log":"none","name":"C"}} +Filter 797 {"flow-limit":{"log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-502 inet6/filter/FORWARD -j limit-502 @@ -7001,7 +9179,7 @@ Filter 509 {"flow-limit":{"log":"none","name":"C"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 510 {"action":"pass","flow-limit":{"log":"none","name":"C"}} +Filter 798 {"action":"pass","flow-limit":{"log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-503 inet6/filter/FORWARD -j limit-503 @@ -7014,7 +9192,7 @@ Filter 510 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-503 -m recent --name user:C --rsource --mask fe00:: --set -Filter 511 {"flow-limit":{"log":"none","name":"C"},"log":true} +Filter 799 {"flow-limit":{"log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-504 inet6/filter/FORWARD -j limit-504 @@ -7037,7 +9215,7 @@ Filter 511 {"flow-limit":{"log":"none","name":"C"},"log" inet/filter/logaccept-final-24 -j ACCEPT inet6/filter/logaccept-final-24 -j ACCEPT -Filter 512 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":true} +Filter 800 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-505 inet6/filter/FORWARD -j limit-505 @@ -7050,7 +9228,7 @@ Filter 512 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-505 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 513 {"flow-limit":{"log":"none","name":"C"},"log":"none"} +Filter 801 {"flow-limit":{"log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-506 inet6/filter/FORWARD -j limit-506 @@ -7069,7 +9247,7 @@ Filter 513 {"flow-limit":{"log":"none","name":"C"},"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 514 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":"none"} +Filter 802 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-507 inet6/filter/FORWARD -j limit-507 @@ -7082,7 +9260,7 @@ Filter 514 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-507 -m recent --name user:C --rsource --mask fe00:: --set -Filter 515 {"flow-limit":{"log":"none","name":"C","update":false}} +Filter 803 {"flow-limit":{"log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-508 inet6/filter/FORWARD -j limit-508 @@ -7099,7 +9277,7 @@ Filter 515 {"flow-limit":{"log":"none","name":"C","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 516 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false}} +Filter 804 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-509 inet6/filter/FORWARD -j limit-509 @@ -7110,7 +9288,7 @@ Filter 516 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-509 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-509 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 517 {"flow-limit":{"log":"none","name":"C","update":false},"log":true} +Filter 805 {"flow-limit":{"log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-510 inet6/filter/FORWARD -j limit-510 @@ -7131,7 +9309,7 @@ Filter 517 {"flow-limit":{"log":"none","name":"C","updat inet/filter/logaccept-final-25 -j ACCEPT inet6/filter/logaccept-final-25 -j ACCEPT -Filter 518 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":true} +Filter 806 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-511 inet6/filter/FORWARD -j limit-511 @@ -7144,7 +9322,7 @@ Filter 518 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-511 -m limit --limit 1/second -j LOG inet6/filter/limit-511 -m limit --limit 1/second -j LOG -Filter 519 {"flow-limit":{"log":"none","name":"C","update":false},"log":"none"} +Filter 807 {"flow-limit":{"log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-512 inet6/filter/FORWARD -j limit-512 @@ -7161,7 +9339,7 @@ Filter 519 {"flow-limit":{"log":"none","name":"C","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 520 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":"none"} +Filter 808 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-513 inet6/filter/FORWARD -j limit-513 @@ -7172,7 +9350,7 @@ Filter 520 {"action":"pass","flow-limit":{"log":"none"," inet/filter/limit-513 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-513 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 521 {"flow-limit":{"addr":"dest","log":"none","name":"C"}} +Filter 809 {"flow-limit":{"addr":"dest","log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-514 inet6/filter/FORWARD -j limit-514 @@ -7191,7 +9369,7 @@ Filter 521 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 522 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"}} +Filter 810 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-515 inet6/filter/FORWARD -j limit-515 @@ -7204,7 +9382,7 @@ Filter 522 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-515 -m recent --name user:C --rdest --mask fe00:: --set -Filter 523 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} +Filter 811 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-516 inet6/filter/FORWARD -j limit-516 @@ -7227,7 +9405,7 @@ Filter 523 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/logaccept-final-26 -j ACCEPT inet6/filter/logaccept-final-26 -j ACCEPT -Filter 524 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} +Filter 812 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-517 inet6/filter/FORWARD -j limit-517 @@ -7240,7 +9418,7 @@ Filter 524 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-517 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 525 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} +Filter 813 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-518 inet6/filter/FORWARD -j limit-518 @@ -7259,7 +9437,7 @@ Filter 525 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 526 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} +Filter 814 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-519 inet6/filter/FORWARD -j limit-519 @@ -7272,7 +9450,7 @@ Filter 526 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-519 -m recent --name user:C --rdest --mask fe00:: --set -Filter 527 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} +Filter 815 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-520 inet6/filter/FORWARD -j limit-520 @@ -7289,7 +9467,7 @@ Filter 527 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 528 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} +Filter 816 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-521 inet6/filter/FORWARD -j limit-521 @@ -7300,7 +9478,7 @@ Filter 528 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-521 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-521 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 529 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} +Filter 817 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-522 inet6/filter/FORWARD -j limit-522 @@ -7321,7 +9499,7 @@ Filter 529 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/logaccept-final-27 -j ACCEPT inet6/filter/logaccept-final-27 -j ACCEPT -Filter 530 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} +Filter 818 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-523 inet6/filter/FORWARD -j limit-523 @@ -7334,7 +9512,7 @@ Filter 530 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-523 -m limit --limit 1/second -j LOG inet6/filter/limit-523 -m limit --limit 1/second -j LOG -Filter 531 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} +Filter 819 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-524 inet6/filter/FORWARD -j limit-524 @@ -7351,7 +9529,7 @@ Filter 531 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 532 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} +Filter 820 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-525 inet6/filter/FORWARD -j limit-525 @@ -7362,7 +9540,7 @@ Filter 532 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-525 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-525 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 533 {"flow-limit":{"interval":5}} +Filter 821 {"flow-limit":{"interval":5}} (filter-limit) inet/filter/FORWARD -j limit-526 inet6/filter/FORWARD -j limit-526 @@ -7385,7 +9563,7 @@ Filter 533 {"flow-limit":{"interval":5}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 534 {"action":"pass","flow-limit":{"interval":5}} +Filter 822 {"action":"pass","flow-limit":{"interval":5}} (filter-limit) inet/filter/FORWARD -j limit-527 inet6/filter/FORWARD -j limit-527 @@ -7402,7 +9580,7 @@ Filter 534 {"action":"pass","flow-limit":{"interval":5}} inet/filter/limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --set inet6/filter/limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 535 {"flow-limit":{"interval":5},"log":true} +Filter 823 {"flow-limit":{"interval":5},"log":true} (filter-limit) inet/filter/FORWARD -j limit-528 inet6/filter/FORWARD -j limit-528 @@ -7429,7 +9607,7 @@ Filter 535 {"flow-limit":{"interval":5},"log":true} inet/filter/logaccept-final-28 -j ACCEPT inet6/filter/logaccept-final-28 -j ACCEPT -Filter 536 {"action":"pass","flow-limit":{"interval":5},"log":true} +Filter 824 {"action":"pass","flow-limit":{"interval":5},"log":true} (filter-limit) inet/filter/FORWARD -j limit-529 inet6/filter/FORWARD -j limit-529 @@ -7446,7 +9624,7 @@ Filter 536 {"action":"pass","flow-limit":{"interval":5}, inet/filter/limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 537 {"flow-limit":{"interval":5},"log":"none"} +Filter 825 {"flow-limit":{"interval":5},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-530 inet6/filter/FORWARD -j limit-530 @@ -7469,7 +9647,7 @@ Filter 537 {"flow-limit":{"interval":5},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 538 {"action":"pass","flow-limit":{"interval":5},"log":"none"} +Filter 826 {"action":"pass","flow-limit":{"interval":5},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-531 inet6/filter/FORWARD -j limit-531 @@ -7486,7 +9664,7 @@ Filter 538 {"action":"pass","flow-limit":{"interval":5}, inet/filter/limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --set inet6/filter/limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 539 {"flow-limit":{"interval":5,"name":"A"}} +Filter 827 {"flow-limit":{"interval":5,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-532 inet6/filter/FORWARD -j limit-532 @@ -7509,7 +9687,7 @@ Filter 539 {"flow-limit":{"interval":5,"name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 540 {"action":"pass","flow-limit":{"interval":5,"name":"A"}} +Filter 828 {"action":"pass","flow-limit":{"interval":5,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-533 inet6/filter/FORWARD -j limit-533 @@ -7526,7 +9704,7 @@ Filter 540 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 541 {"flow-limit":{"interval":5,"name":"A"},"log":true} +Filter 829 {"flow-limit":{"interval":5,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-534 inet6/filter/FORWARD -j limit-534 @@ -7553,7 +9731,7 @@ Filter 541 {"flow-limit":{"interval":5,"name":"A"},"log" inet/filter/logaccept-final-29 -j ACCEPT inet6/filter/logaccept-final-29 -j ACCEPT -Filter 542 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":true} +Filter 830 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-535 inet6/filter/FORWARD -j limit-535 @@ -7570,7 +9748,7 @@ Filter 542 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 543 {"flow-limit":{"interval":5,"name":"A"},"log":"none"} +Filter 831 {"flow-limit":{"interval":5,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-536 inet6/filter/FORWARD -j limit-536 @@ -7593,7 +9771,7 @@ Filter 543 {"flow-limit":{"interval":5,"name":"A"},"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 544 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"none"} +Filter 832 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-537 inet6/filter/FORWARD -j limit-537 @@ -7610,7 +9788,7 @@ Filter 544 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 545 {"flow-limit":{"interval":5,"name":"A","update":false}} +Filter 833 {"flow-limit":{"interval":5,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-538 inet6/filter/FORWARD -j limit-538 @@ -7631,7 +9809,7 @@ Filter 545 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 546 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false}} +Filter 834 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-539 inet6/filter/FORWARD -j limit-539 @@ -7646,7 +9824,7 @@ Filter 546 {"action":"pass","flow-limit":{"interval":5," inet/filter/logdrop-188 -j DROP inet6/filter/logdrop-188 -j DROP -Filter 547 {"flow-limit":{"interval":5,"name":"A","update":false},"log":true} +Filter 835 {"flow-limit":{"interval":5,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-540 inet6/filter/FORWARD -j limit-540 @@ -7671,7 +9849,7 @@ Filter 547 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/logaccept-final-30 -j ACCEPT inet6/filter/logaccept-final-30 -j ACCEPT -Filter 548 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":true} +Filter 836 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-541 inet6/filter/FORWARD -j limit-541 @@ -7688,7 +9866,7 @@ Filter 548 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-541 -m limit --limit 1/second -j LOG inet6/filter/limit-541 -m limit --limit 1/second -j LOG -Filter 549 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} +Filter 837 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-542 inet6/filter/FORWARD -j limit-542 @@ -7709,7 +9887,7 @@ Filter 549 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 550 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} +Filter 838 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-543 inet6/filter/FORWARD -j limit-543 @@ -7724,7 +9902,7 @@ Filter 550 {"action":"pass","flow-limit":{"interval":5," inet/filter/logdrop-192 -j DROP inet6/filter/logdrop-192 -j DROP -Filter 551 {"flow-limit":{"addr":"dest","interval":5,"name":"A"}} +Filter 839 {"flow-limit":{"addr":"dest","interval":5,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-544 inet6/filter/FORWARD -j limit-544 @@ -7747,7 +9925,7 @@ Filter 551 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 552 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"}} +Filter 840 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-545 inet6/filter/FORWARD -j limit-545 @@ -7764,7 +9942,7 @@ Filter 552 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 553 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} +Filter 841 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-546 inet6/filter/FORWARD -j limit-546 @@ -7791,7 +9969,7 @@ Filter 553 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/logaccept-final-31 -j ACCEPT inet6/filter/logaccept-final-31 -j ACCEPT -Filter 554 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} +Filter 842 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-547 inet6/filter/FORWARD -j limit-547 @@ -7808,7 +9986,7 @@ Filter 554 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 555 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} +Filter 843 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-548 inet6/filter/FORWARD -j limit-548 @@ -7831,7 +10009,7 @@ Filter 555 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 556 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} +Filter 844 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-549 inet6/filter/FORWARD -j limit-549 @@ -7848,7 +10026,7 @@ Filter 556 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 557 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} +Filter 845 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-550 inet6/filter/FORWARD -j limit-550 @@ -7869,7 +10047,7 @@ Filter 557 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 558 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} +Filter 846 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-551 inet6/filter/FORWARD -j limit-551 @@ -7884,7 +10062,7 @@ Filter 558 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/logdrop-200 -j DROP inet6/filter/logdrop-200 -j DROP -Filter 559 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +Filter 847 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-552 inet6/filter/FORWARD -j limit-552 @@ -7909,7 +10087,7 @@ Filter 559 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/logaccept-final-32 -j ACCEPT inet6/filter/logaccept-final-32 -j ACCEPT -Filter 560 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +Filter 848 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-553 inet6/filter/FORWARD -j limit-553 @@ -7926,7 +10104,7 @@ Filter 560 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-553 -m limit --limit 1/second -j LOG inet6/filter/limit-553 -m limit --limit 1/second -j LOG -Filter 561 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} +Filter 849 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-554 inet6/filter/FORWARD -j limit-554 @@ -7947,7 +10125,7 @@ Filter 561 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 562 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} +Filter 850 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-555 inet6/filter/FORWARD -j limit-555 @@ -7962,7 +10140,7 @@ Filter 562 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/logdrop-204 -j DROP inet6/filter/logdrop-204 -j DROP -Filter 563 {"flow-limit":{"interval":5,"name":"C"}} +Filter 851 {"flow-limit":{"interval":5,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-556 inet6/filter/FORWARD -j limit-556 @@ -7985,7 +10163,7 @@ Filter 563 {"flow-limit":{"interval":5,"name":"C"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 564 {"action":"pass","flow-limit":{"interval":5,"name":"C"}} +Filter 852 {"action":"pass","flow-limit":{"interval":5,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-557 inet6/filter/FORWARD -j limit-557 @@ -8002,7 +10180,7 @@ Filter 564 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-557 -m recent --name user:C --rsource --mask fe00:: --set -Filter 565 {"flow-limit":{"interval":5,"name":"C"},"log":true} +Filter 853 {"flow-limit":{"interval":5,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-558 inet6/filter/FORWARD -j limit-558 @@ -8029,7 +10207,7 @@ Filter 565 {"flow-limit":{"interval":5,"name":"C"},"log" inet/filter/logaccept-final-33 -j ACCEPT inet6/filter/logaccept-final-33 -j ACCEPT -Filter 566 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":true} +Filter 854 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-559 inet6/filter/FORWARD -j limit-559 @@ -8046,7 +10224,7 @@ Filter 566 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-559 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 567 {"flow-limit":{"interval":5,"name":"C"},"log":"none"} +Filter 855 {"flow-limit":{"interval":5,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-560 inet6/filter/FORWARD -j limit-560 @@ -8069,7 +10247,7 @@ Filter 567 {"flow-limit":{"interval":5,"name":"C"},"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 568 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":"none"} +Filter 856 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-561 inet6/filter/FORWARD -j limit-561 @@ -8086,7 +10264,7 @@ Filter 568 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-561 -m recent --name user:C --rsource --mask fe00:: --set -Filter 569 {"flow-limit":{"interval":5,"name":"C","update":false}} +Filter 857 {"flow-limit":{"interval":5,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-562 inet6/filter/FORWARD -j limit-562 @@ -8107,7 +10285,7 @@ Filter 569 {"flow-limit":{"interval":5,"name":"C","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 570 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false}} +Filter 858 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-563 inet6/filter/FORWARD -j limit-563 @@ -8122,7 +10300,7 @@ Filter 570 {"action":"pass","flow-limit":{"interval":5," inet/filter/logdrop-212 -j DROP inet6/filter/logdrop-212 -j DROP -Filter 571 {"flow-limit":{"interval":5,"name":"C","update":false},"log":true} +Filter 859 {"flow-limit":{"interval":5,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-564 inet6/filter/FORWARD -j limit-564 @@ -8147,7 +10325,7 @@ Filter 571 {"flow-limit":{"interval":5,"name":"C","updat inet/filter/logaccept-final-34 -j ACCEPT inet6/filter/logaccept-final-34 -j ACCEPT -Filter 572 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":true} +Filter 860 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-565 inet6/filter/FORWARD -j limit-565 @@ -8164,7 +10342,7 @@ Filter 572 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-565 -m limit --limit 1/second -j LOG inet6/filter/limit-565 -m limit --limit 1/second -j LOG -Filter 573 {"flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} +Filter 861 {"flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-566 inet6/filter/FORWARD -j limit-566 @@ -8185,7 +10363,7 @@ Filter 573 {"flow-limit":{"interval":5,"name":"C","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 574 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} +Filter 862 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-567 inet6/filter/FORWARD -j limit-567 @@ -8200,7 +10378,7 @@ Filter 574 {"action":"pass","flow-limit":{"interval":5," inet/filter/logdrop-216 -j DROP inet6/filter/logdrop-216 -j DROP -Filter 575 {"flow-limit":{"addr":"dest","interval":5,"name":"C"}} +Filter 863 {"flow-limit":{"addr":"dest","interval":5,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-568 inet6/filter/FORWARD -j limit-568 @@ -8223,7 +10401,7 @@ Filter 575 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 576 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"}} +Filter 864 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-569 inet6/filter/FORWARD -j limit-569 @@ -8240,7 +10418,7 @@ Filter 576 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-569 -m recent --name user:C --rdest --mask fe00:: --set -Filter 577 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} +Filter 865 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-570 inet6/filter/FORWARD -j limit-570 @@ -8267,7 +10445,7 @@ Filter 577 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/logaccept-final-35 -j ACCEPT inet6/filter/logaccept-final-35 -j ACCEPT -Filter 578 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} +Filter 866 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-571 inet6/filter/FORWARD -j limit-571 @@ -8284,7 +10462,7 @@ Filter 578 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-571 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 579 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} +Filter 867 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-572 inet6/filter/FORWARD -j limit-572 @@ -8307,7 +10485,7 @@ Filter 579 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 580 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} +Filter 868 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-573 inet6/filter/FORWARD -j limit-573 @@ -8324,7 +10502,7 @@ Filter 580 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-573 -m recent --name user:C --rdest --mask fe00:: --set -Filter 581 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} +Filter 869 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-574 inet6/filter/FORWARD -j limit-574 @@ -8345,7 +10523,7 @@ Filter 581 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 582 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} +Filter 870 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-575 inet6/filter/FORWARD -j limit-575 @@ -8360,7 +10538,7 @@ Filter 582 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/logdrop-224 -j DROP inet6/filter/logdrop-224 -j DROP -Filter 583 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} +Filter 871 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-576 inet6/filter/FORWARD -j limit-576 @@ -8385,7 +10563,7 @@ Filter 583 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/logaccept-final-36 -j ACCEPT inet6/filter/logaccept-final-36 -j ACCEPT -Filter 584 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} +Filter 872 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-577 inet6/filter/FORWARD -j limit-577 @@ -8402,7 +10580,7 @@ Filter 584 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-577 -m limit --limit 1/second -j LOG inet6/filter/limit-577 -m limit --limit 1/second -j LOG -Filter 585 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} +Filter 873 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-578 inet6/filter/FORWARD -j limit-578 @@ -8423,7 +10601,7 @@ Filter 585 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 586 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} +Filter 874 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-579 inet6/filter/FORWARD -j limit-579 @@ -8438,7 +10616,7 @@ Filter 586 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/logdrop-228 -j DROP inet6/filter/logdrop-228 -j DROP -Filter 587 {"flow-limit":{"interval":5,"log":false}} +Filter 875 {"flow-limit":{"interval":5,"log":false}} (filter-limit) inet/filter/FORWARD -j limit-580 inet6/filter/FORWARD -j limit-580 @@ -8457,7 +10635,7 @@ Filter 587 {"flow-limit":{"interval":5,"log":false}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 588 {"action":"pass","flow-limit":{"interval":5,"log":false}} +Filter 876 {"action":"pass","flow-limit":{"interval":5,"log":false}} (filter-limit) inet/filter/FORWARD -j limit-581 inet6/filter/FORWARD -j limit-581 @@ -8470,7 +10648,7 @@ Filter 588 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --set inet6/filter/limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 589 {"flow-limit":{"interval":5,"log":false},"log":true} +Filter 877 {"flow-limit":{"interval":5,"log":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-582 inet6/filter/FORWARD -j limit-582 @@ -8493,7 +10671,7 @@ Filter 589 {"flow-limit":{"interval":5,"log":false},"log inet/filter/logaccept-final-37 -j ACCEPT inet6/filter/logaccept-final-37 -j ACCEPT -Filter 590 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":true} +Filter 878 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-583 inet6/filter/FORWARD -j limit-583 @@ -8506,7 +10684,7 @@ Filter 590 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 591 {"flow-limit":{"interval":5,"log":false},"log":"none"} +Filter 879 {"flow-limit":{"interval":5,"log":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-584 inet6/filter/FORWARD -j limit-584 @@ -8525,7 +10703,7 @@ Filter 591 {"flow-limit":{"interval":5,"log":false},"log inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 592 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"none"} +Filter 880 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-585 inet6/filter/FORWARD -j limit-585 @@ -8538,7 +10716,7 @@ Filter 592 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --set inet6/filter/limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 593 {"flow-limit":{"interval":5,"log":false,"name":"A"}} +Filter 881 {"flow-limit":{"interval":5,"log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-586 inet6/filter/FORWARD -j limit-586 @@ -8557,7 +10735,7 @@ Filter 593 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 594 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"}} +Filter 882 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-587 inet6/filter/FORWARD -j limit-587 @@ -8570,7 +10748,7 @@ Filter 594 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 595 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} +Filter 883 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-588 inet6/filter/FORWARD -j limit-588 @@ -8593,7 +10771,7 @@ Filter 595 {"flow-limit":{"interval":5,"log":false,"name inet/filter/logaccept-final-38 -j ACCEPT inet6/filter/logaccept-final-38 -j ACCEPT -Filter 596 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} +Filter 884 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-589 inet6/filter/FORWARD -j limit-589 @@ -8606,7 +10784,7 @@ Filter 596 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 597 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} +Filter 885 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-590 inet6/filter/FORWARD -j limit-590 @@ -8625,7 +10803,7 @@ Filter 597 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 598 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} +Filter 886 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-591 inet6/filter/FORWARD -j limit-591 @@ -8638,7 +10816,7 @@ Filter 598 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 599 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false}} +Filter 887 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-592 inet6/filter/FORWARD -j limit-592 @@ -8655,7 +10833,7 @@ Filter 599 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 600 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false}} +Filter 888 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-593 inet6/filter/FORWARD -j limit-593 @@ -8666,7 +10844,7 @@ Filter 600 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-593 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-593 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 601 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} +Filter 889 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-594 inet6/filter/FORWARD -j limit-594 @@ -8687,7 +10865,7 @@ Filter 601 {"flow-limit":{"interval":5,"log":false,"name inet/filter/logaccept-final-39 -j ACCEPT inet6/filter/logaccept-final-39 -j ACCEPT -Filter 602 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} +Filter 890 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-595 inet6/filter/FORWARD -j limit-595 @@ -8700,7 +10878,7 @@ Filter 602 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-595 -m limit --limit 1/second -j LOG inet6/filter/limit-595 -m limit --limit 1/second -j LOG -Filter 603 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} +Filter 891 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-596 inet6/filter/FORWARD -j limit-596 @@ -8717,7 +10895,7 @@ Filter 603 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 604 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} +Filter 892 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-597 inet6/filter/FORWARD -j limit-597 @@ -8728,7 +10906,7 @@ Filter 604 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-597 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-597 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 605 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} +Filter 893 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-598 inet6/filter/FORWARD -j limit-598 @@ -8747,7 +10925,7 @@ Filter 605 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 606 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} +Filter 894 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-599 inet6/filter/FORWARD -j limit-599 @@ -8760,7 +10938,7 @@ Filter 606 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 607 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} +Filter 895 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-600 inet6/filter/FORWARD -j limit-600 @@ -8783,7 +10961,7 @@ Filter 607 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-40 -j ACCEPT inet6/filter/logaccept-final-40 -j ACCEPT -Filter 608 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} +Filter 896 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-601 inet6/filter/FORWARD -j limit-601 @@ -8796,7 +10974,7 @@ Filter 608 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 609 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} +Filter 897 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-602 inet6/filter/FORWARD -j limit-602 @@ -8815,7 +10993,7 @@ Filter 609 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 610 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} +Filter 898 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-603 inet6/filter/FORWARD -j limit-603 @@ -8828,7 +11006,7 @@ Filter 610 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 611 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} +Filter 899 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-604 inet6/filter/FORWARD -j limit-604 @@ -8845,7 +11023,7 @@ Filter 611 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 612 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} +Filter 900 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-605 inet6/filter/FORWARD -j limit-605 @@ -8856,7 +11034,7 @@ Filter 612 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-605 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 613 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} +Filter 901 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-606 inet6/filter/FORWARD -j limit-606 @@ -8877,7 +11055,7 @@ Filter 613 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-41 -j ACCEPT inet6/filter/logaccept-final-41 -j ACCEPT -Filter 614 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} +Filter 902 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-607 inet6/filter/FORWARD -j limit-607 @@ -8890,7 +11068,7 @@ Filter 614 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-607 -m limit --limit 1/second -j LOG inet6/filter/limit-607 -m limit --limit 1/second -j LOG -Filter 615 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} +Filter 903 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-608 inet6/filter/FORWARD -j limit-608 @@ -8907,7 +11085,7 @@ Filter 615 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 616 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} +Filter 904 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-609 inet6/filter/FORWARD -j limit-609 @@ -8918,7 +11096,7 @@ Filter 616 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-609 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-609 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 617 {"flow-limit":{"interval":5,"log":false,"name":"C"}} +Filter 905 {"flow-limit":{"interval":5,"log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-610 inet6/filter/FORWARD -j limit-610 @@ -8937,7 +11115,7 @@ Filter 617 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 618 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"}} +Filter 906 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-611 inet6/filter/FORWARD -j limit-611 @@ -8950,7 +11128,7 @@ Filter 618 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-611 -m recent --name user:C --rsource --mask fe00:: --set -Filter 619 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} +Filter 907 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-612 inet6/filter/FORWARD -j limit-612 @@ -8973,7 +11151,7 @@ Filter 619 {"flow-limit":{"interval":5,"log":false,"name inet/filter/logaccept-final-42 -j ACCEPT inet6/filter/logaccept-final-42 -j ACCEPT -Filter 620 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} +Filter 908 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-613 inet6/filter/FORWARD -j limit-613 @@ -8986,7 +11164,7 @@ Filter 620 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-613 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 621 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} +Filter 909 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-614 inet6/filter/FORWARD -j limit-614 @@ -9005,7 +11183,7 @@ Filter 621 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 622 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} +Filter 910 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-615 inet6/filter/FORWARD -j limit-615 @@ -9018,7 +11196,7 @@ Filter 622 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-615 -m recent --name user:C --rsource --mask fe00:: --set -Filter 623 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false}} +Filter 911 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-616 inet6/filter/FORWARD -j limit-616 @@ -9035,7 +11213,7 @@ Filter 623 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 624 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false}} +Filter 912 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-617 inet6/filter/FORWARD -j limit-617 @@ -9046,7 +11224,7 @@ Filter 624 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-617 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-617 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 625 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} +Filter 913 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-618 inet6/filter/FORWARD -j limit-618 @@ -9067,7 +11245,7 @@ Filter 625 {"flow-limit":{"interval":5,"log":false,"name inet/filter/logaccept-final-43 -j ACCEPT inet6/filter/logaccept-final-43 -j ACCEPT -Filter 626 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} +Filter 914 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-619 inet6/filter/FORWARD -j limit-619 @@ -9080,7 +11258,7 @@ Filter 626 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-619 -m limit --limit 1/second -j LOG inet6/filter/limit-619 -m limit --limit 1/second -j LOG -Filter 627 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} +Filter 915 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-620 inet6/filter/FORWARD -j limit-620 @@ -9097,7 +11275,7 @@ Filter 627 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 628 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} +Filter 916 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-621 inet6/filter/FORWARD -j limit-621 @@ -9108,7 +11286,7 @@ Filter 628 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-621 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-621 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 629 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} +Filter 917 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-622 inet6/filter/FORWARD -j limit-622 @@ -9127,7 +11305,7 @@ Filter 629 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 630 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} +Filter 918 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-623 inet6/filter/FORWARD -j limit-623 @@ -9140,7 +11318,7 @@ Filter 630 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-623 -m recent --name user:C --rdest --mask fe00:: --set -Filter 631 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} +Filter 919 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-624 inet6/filter/FORWARD -j limit-624 @@ -9163,7 +11341,7 @@ Filter 631 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-44 -j ACCEPT inet6/filter/logaccept-final-44 -j ACCEPT -Filter 632 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} +Filter 920 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-625 inet6/filter/FORWARD -j limit-625 @@ -9176,7 +11354,7 @@ Filter 632 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-625 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 633 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} +Filter 921 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-626 inet6/filter/FORWARD -j limit-626 @@ -9195,7 +11373,7 @@ Filter 633 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 634 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} +Filter 922 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-627 inet6/filter/FORWARD -j limit-627 @@ -9208,7 +11386,7 @@ Filter 634 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-627 -m recent --name user:C --rdest --mask fe00:: --set -Filter 635 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} +Filter 923 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-628 inet6/filter/FORWARD -j limit-628 @@ -9225,7 +11403,7 @@ Filter 635 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 636 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} +Filter 924 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-629 inet6/filter/FORWARD -j limit-629 @@ -9236,7 +11414,7 @@ Filter 636 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-629 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-629 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 637 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} +Filter 925 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-630 inet6/filter/FORWARD -j limit-630 @@ -9257,7 +11435,7 @@ Filter 637 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-45 -j ACCEPT inet6/filter/logaccept-final-45 -j ACCEPT -Filter 638 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} +Filter 926 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-631 inet6/filter/FORWARD -j limit-631 @@ -9270,7 +11448,7 @@ Filter 638 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-631 -m limit --limit 1/second -j LOG inet6/filter/limit-631 -m limit --limit 1/second -j LOG -Filter 639 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} +Filter 927 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-632 inet6/filter/FORWARD -j limit-632 @@ -9287,7 +11465,7 @@ Filter 639 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 640 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} +Filter 928 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-633 inet6/filter/FORWARD -j limit-633 @@ -9298,7 +11476,7 @@ Filter 640 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-633 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-633 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 641 {"flow-limit":{"interval":5,"log":"none"}} +Filter 929 {"flow-limit":{"interval":5,"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-634 inet6/filter/FORWARD -j limit-634 @@ -9317,7 +11495,7 @@ Filter 641 {"flow-limit":{"interval":5,"log":"none"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 642 {"action":"pass","flow-limit":{"interval":5,"log":"none"}} +Filter 930 {"action":"pass","flow-limit":{"interval":5,"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-635 inet6/filter/FORWARD -j limit-635 @@ -9330,7 +11508,7 @@ Filter 642 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --set inet6/filter/limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 643 {"flow-limit":{"interval":5,"log":"none"},"log":true} +Filter 931 {"flow-limit":{"interval":5,"log":"none"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-636 inet6/filter/FORWARD -j limit-636 @@ -9353,7 +11531,7 @@ Filter 643 {"flow-limit":{"interval":5,"log":"none"},"lo inet/filter/logaccept-final-46 -j ACCEPT inet6/filter/logaccept-final-46 -j ACCEPT -Filter 644 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":true} +Filter 932 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-637 inet6/filter/FORWARD -j limit-637 @@ -9366,7 +11544,7 @@ Filter 644 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 645 {"flow-limit":{"interval":5,"log":"none"},"log":"none"} +Filter 933 {"flow-limit":{"interval":5,"log":"none"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-638 inet6/filter/FORWARD -j limit-638 @@ -9385,7 +11563,7 @@ Filter 645 {"flow-limit":{"interval":5,"log":"none"},"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 646 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"none"} +Filter 934 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-639 inet6/filter/FORWARD -j limit-639 @@ -9398,7 +11576,7 @@ Filter 646 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --set inet6/filter/limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 647 {"flow-limit":{"interval":5,"log":"none","name":"A"}} +Filter 935 {"flow-limit":{"interval":5,"log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-640 inet6/filter/FORWARD -j limit-640 @@ -9417,7 +11595,7 @@ Filter 647 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 648 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"}} +Filter 936 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-641 inet6/filter/FORWARD -j limit-641 @@ -9430,7 +11608,7 @@ Filter 648 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 649 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} +Filter 937 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-642 inet6/filter/FORWARD -j limit-642 @@ -9453,7 +11631,7 @@ Filter 649 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/logaccept-final-47 -j ACCEPT inet6/filter/logaccept-final-47 -j ACCEPT -Filter 650 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} +Filter 938 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-643 inet6/filter/FORWARD -j limit-643 @@ -9466,7 +11644,7 @@ Filter 650 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 651 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} +Filter 939 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-644 inet6/filter/FORWARD -j limit-644 @@ -9485,7 +11663,7 @@ Filter 651 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 652 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} +Filter 940 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-645 inet6/filter/FORWARD -j limit-645 @@ -9498,7 +11676,7 @@ Filter 652 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 653 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false}} +Filter 941 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-646 inet6/filter/FORWARD -j limit-646 @@ -9515,7 +11693,7 @@ Filter 653 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 654 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false}} +Filter 942 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-647 inet6/filter/FORWARD -j limit-647 @@ -9526,7 +11704,7 @@ Filter 654 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-647 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-647 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 655 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} +Filter 943 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-648 inet6/filter/FORWARD -j limit-648 @@ -9547,7 +11725,7 @@ Filter 655 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/logaccept-final-48 -j ACCEPT inet6/filter/logaccept-final-48 -j ACCEPT -Filter 656 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} +Filter 944 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-649 inet6/filter/FORWARD -j limit-649 @@ -9560,7 +11738,7 @@ Filter 656 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-649 -m limit --limit 1/second -j LOG inet6/filter/limit-649 -m limit --limit 1/second -j LOG -Filter 657 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} +Filter 945 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-650 inet6/filter/FORWARD -j limit-650 @@ -9577,7 +11755,7 @@ Filter 657 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 658 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} +Filter 946 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-651 inet6/filter/FORWARD -j limit-651 @@ -9588,7 +11766,7 @@ Filter 658 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 659 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} +Filter 947 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-652 inet6/filter/FORWARD -j limit-652 @@ -9607,7 +11785,7 @@ Filter 659 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 660 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} +Filter 948 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-653 inet6/filter/FORWARD -j limit-653 @@ -9620,7 +11798,7 @@ Filter 660 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 661 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} +Filter 949 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-654 inet6/filter/FORWARD -j limit-654 @@ -9643,7 +11821,7 @@ Filter 661 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-49 -j ACCEPT inet6/filter/logaccept-final-49 -j ACCEPT -Filter 662 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} +Filter 950 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-655 inet6/filter/FORWARD -j limit-655 @@ -9656,7 +11834,7 @@ Filter 662 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 663 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +Filter 951 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-656 inet6/filter/FORWARD -j limit-656 @@ -9675,7 +11853,7 @@ Filter 663 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 664 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +Filter 952 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-657 inet6/filter/FORWARD -j limit-657 @@ -9688,7 +11866,7 @@ Filter 664 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 665 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} +Filter 953 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-658 inet6/filter/FORWARD -j limit-658 @@ -9705,7 +11883,7 @@ Filter 665 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 666 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} +Filter 954 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-659 inet6/filter/FORWARD -j limit-659 @@ -9716,7 +11894,7 @@ Filter 666 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-659 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-659 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 667 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} +Filter 955 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-660 inet6/filter/FORWARD -j limit-660 @@ -9737,7 +11915,7 @@ Filter 667 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-50 -j ACCEPT inet6/filter/logaccept-final-50 -j ACCEPT -Filter 668 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} +Filter 956 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-661 inet6/filter/FORWARD -j limit-661 @@ -9750,7 +11928,7 @@ Filter 668 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-661 -m limit --limit 1/second -j LOG inet6/filter/limit-661 -m limit --limit 1/second -j LOG -Filter 669 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +Filter 957 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-662 inet6/filter/FORWARD -j limit-662 @@ -9767,7 +11945,7 @@ Filter 669 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 670 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +Filter 958 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-663 inet6/filter/FORWARD -j limit-663 @@ -9778,7 +11956,7 @@ Filter 670 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-663 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-663 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 671 {"flow-limit":{"interval":5,"log":"none","name":"C"}} +Filter 959 {"flow-limit":{"interval":5,"log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-664 inet6/filter/FORWARD -j limit-664 @@ -9797,7 +11975,7 @@ Filter 671 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 672 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"}} +Filter 960 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-665 inet6/filter/FORWARD -j limit-665 @@ -9810,7 +11988,7 @@ Filter 672 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-665 -m recent --name user:C --rsource --mask fe00:: --set -Filter 673 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} +Filter 961 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-666 inet6/filter/FORWARD -j limit-666 @@ -9833,7 +12011,7 @@ Filter 673 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/logaccept-final-51 -j ACCEPT inet6/filter/logaccept-final-51 -j ACCEPT -Filter 674 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} +Filter 962 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-667 inet6/filter/FORWARD -j limit-667 @@ -9846,7 +12024,7 @@ Filter 674 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-667 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 675 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} +Filter 963 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-668 inet6/filter/FORWARD -j limit-668 @@ -9865,7 +12043,7 @@ Filter 675 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 676 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} +Filter 964 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-669 inet6/filter/FORWARD -j limit-669 @@ -9878,7 +12056,7 @@ Filter 676 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-669 -m recent --name user:C --rsource --mask fe00:: --set -Filter 677 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false}} +Filter 965 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-670 inet6/filter/FORWARD -j limit-670 @@ -9895,7 +12073,7 @@ Filter 677 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 678 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false}} +Filter 966 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-671 inet6/filter/FORWARD -j limit-671 @@ -9906,7 +12084,7 @@ Filter 678 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-671 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-671 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 679 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} +Filter 967 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-672 inet6/filter/FORWARD -j limit-672 @@ -9927,7 +12105,7 @@ Filter 679 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/logaccept-final-52 -j ACCEPT inet6/filter/logaccept-final-52 -j ACCEPT -Filter 680 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} +Filter 968 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-673 inet6/filter/FORWARD -j limit-673 @@ -9940,7 +12118,7 @@ Filter 680 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-673 -m limit --limit 1/second -j LOG inet6/filter/limit-673 -m limit --limit 1/second -j LOG -Filter 681 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} +Filter 969 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-674 inet6/filter/FORWARD -j limit-674 @@ -9957,7 +12135,7 @@ Filter 681 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 682 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} +Filter 970 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-675 inet6/filter/FORWARD -j limit-675 @@ -9968,7 +12146,7 @@ Filter 682 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-675 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-675 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 683 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} +Filter 971 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-676 inet6/filter/FORWARD -j limit-676 @@ -9987,7 +12165,7 @@ Filter 683 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 684 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} +Filter 972 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-677 inet6/filter/FORWARD -j limit-677 @@ -10000,7 +12178,7 @@ Filter 684 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-677 -m recent --name user:C --rdest --mask fe00:: --set -Filter 685 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} +Filter 973 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-678 inet6/filter/FORWARD -j limit-678 @@ -10023,7 +12201,7 @@ Filter 685 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-53 -j ACCEPT inet6/filter/logaccept-final-53 -j ACCEPT -Filter 686 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} +Filter 974 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-679 inet6/filter/FORWARD -j limit-679 @@ -10036,7 +12214,7 @@ Filter 686 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-679 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 687 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} +Filter 975 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-680 inet6/filter/FORWARD -j limit-680 @@ -10055,7 +12233,7 @@ Filter 687 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 688 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} +Filter 976 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-681 inet6/filter/FORWARD -j limit-681 @@ -10068,7 +12246,7 @@ Filter 688 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-681 -m recent --name user:C --rdest --mask fe00:: --set -Filter 689 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} +Filter 977 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-682 inet6/filter/FORWARD -j limit-682 @@ -10085,7 +12263,7 @@ Filter 689 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 690 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} +Filter 978 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-683 inet6/filter/FORWARD -j limit-683 @@ -10096,7 +12274,7 @@ Filter 690 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-683 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-683 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 691 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} +Filter 979 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-684 inet6/filter/FORWARD -j limit-684 @@ -10117,7 +12295,7 @@ Filter 691 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-54 -j ACCEPT inet6/filter/logaccept-final-54 -j ACCEPT -Filter 692 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} +Filter 980 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-685 inet6/filter/FORWARD -j limit-685 @@ -10130,7 +12308,7 @@ Filter 692 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-685 -m limit --limit 1/second -j LOG inet6/filter/limit-685 -m limit --limit 1/second -j LOG -Filter 693 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} +Filter 981 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-686 inet6/filter/FORWARD -j limit-686 @@ -10147,7 +12325,7 @@ Filter 693 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 694 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} +Filter 982 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-687 inet6/filter/FORWARD -j limit-687 @@ -10158,7 +12336,7 @@ Filter 694 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-687 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-687 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 695 {"flow-limit":150} +Filter 983 {"flow-limit":150} (filter-limit) inet/filter/FORWARD -j limit-688 inet6/filter/FORWARD -j limit-688 @@ -10179,7 +12357,7 @@ Filter 695 {"flow-limit":150} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 696 {"action":"pass","flow-limit":150} +Filter 984 {"action":"pass","flow-limit":150} (filter-limit) inet/filter/FORWARD -j limit-689 inet6/filter/FORWARD -j limit-689 @@ -10194,7 +12372,7 @@ Filter 696 {"action":"pass","flow-limit":150} inet/filter/limit-689 -j DROP inet6/filter/limit-689 -j DROP -Filter 697 {"flow-limit":150,"log":true} +Filter 985 {"flow-limit":150,"log":true} (filter-limit) inet/filter/FORWARD -j limit-690 inet6/filter/FORWARD -j limit-690 @@ -10219,7 +12397,7 @@ Filter 697 {"flow-limit":150,"log":true} inet/filter/logaccept-final-55 -j ACCEPT inet6/filter/logaccept-final-55 -j ACCEPT -Filter 698 {"flow-limit":150,"log":"none"} +Filter 986 {"flow-limit":150,"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-691 inet6/filter/FORWARD -j limit-691 @@ -10240,7 +12418,7 @@ Filter 698 {"flow-limit":150,"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 699 {"flow-limit":{"count":150}} +Filter 987 {"flow-limit":{"count":150}} (filter-limit) inet/filter/FORWARD -j limit-692 inet6/filter/FORWARD -j limit-692 @@ -10261,7 +12439,7 @@ Filter 699 {"flow-limit":{"count":150}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 700 {"action":"pass","flow-limit":{"count":150}} +Filter 988 {"action":"pass","flow-limit":{"count":150}} (filter-limit) inet/filter/FORWARD -j limit-693 inet6/filter/FORWARD -j limit-693 @@ -10276,7 +12454,7 @@ Filter 700 {"action":"pass","flow-limit":{"count":150}} inet/filter/limit-693 -j DROP inet6/filter/limit-693 -j DROP -Filter 701 {"flow-limit":{"count":150},"log":true} +Filter 989 {"flow-limit":{"count":150},"log":true} (filter-limit) inet/filter/FORWARD -j limit-694 inet6/filter/FORWARD -j limit-694 @@ -10301,7 +12479,7 @@ Filter 701 {"flow-limit":{"count":150},"log":true} inet/filter/logaccept-final-56 -j ACCEPT inet6/filter/logaccept-final-56 -j ACCEPT -Filter 702 {"flow-limit":{"count":150},"log":"none"} +Filter 990 {"flow-limit":{"count":150},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-695 inet6/filter/FORWARD -j limit-695 @@ -10322,7 +12500,7 @@ Filter 702 {"flow-limit":{"count":150},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 703 {"flow-limit":{"count":150,"log":false}} +Filter 991 {"flow-limit":{"count":150,"log":false}} (filter-limit) inet/filter/FORWARD -j limit-696 inet6/filter/FORWARD -j limit-696 @@ -10341,7 +12519,7 @@ Filter 703 {"flow-limit":{"count":150,"log":false}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 704 {"action":"pass","flow-limit":{"count":150,"log":false}} +Filter 992 {"action":"pass","flow-limit":{"count":150,"log":false}} (filter-limit) inet/filter/FORWARD -j limit-697 inet6/filter/FORWARD -j limit-697 @@ -10354,7 +12532,7 @@ Filter 704 {"action":"pass","flow-limit":{"count":150,"l inet/filter/limit-697 -j DROP inet6/filter/limit-697 -j DROP -Filter 705 {"flow-limit":{"count":150,"log":false},"log":true} +Filter 993 {"flow-limit":{"count":150,"log":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-698 inet6/filter/FORWARD -j limit-698 @@ -10377,7 +12555,7 @@ Filter 705 {"flow-limit":{"count":150,"log":false},"log" inet/filter/logaccept-final-57 -j ACCEPT inet6/filter/logaccept-final-57 -j ACCEPT -Filter 706 {"flow-limit":{"count":150,"log":false},"log":"none"} +Filter 994 {"flow-limit":{"count":150,"log":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-699 inet6/filter/FORWARD -j limit-699 @@ -10396,7 +12574,7 @@ Filter 706 {"flow-limit":{"count":150,"log":false},"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 707 {"flow-limit":{"count":150,"log":"none"}} +Filter 995 {"flow-limit":{"count":150,"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-700 inet6/filter/FORWARD -j limit-700 @@ -10415,7 +12593,7 @@ Filter 707 {"flow-limit":{"count":150,"log":"none"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 708 {"action":"pass","flow-limit":{"count":150,"log":"none"}} +Filter 996 {"action":"pass","flow-limit":{"count":150,"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-701 inet6/filter/FORWARD -j limit-701 @@ -10428,7 +12606,7 @@ Filter 708 {"action":"pass","flow-limit":{"count":150,"l inet/filter/limit-701 -j DROP inet6/filter/limit-701 -j DROP -Filter 709 {"flow-limit":{"count":150,"log":"none"},"log":true} +Filter 997 {"flow-limit":{"count":150,"log":"none"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-702 inet6/filter/FORWARD -j limit-702 @@ -10451,7 +12629,7 @@ Filter 709 {"flow-limit":{"count":150,"log":"none"},"log inet/filter/logaccept-final-58 -j ACCEPT inet6/filter/logaccept-final-58 -j ACCEPT -Filter 710 {"flow-limit":{"count":150,"log":"none"},"log":"none"} +Filter 998 {"flow-limit":{"count":150,"log":"none"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-703 inet6/filter/FORWARD -j limit-703 @@ -10470,7 +12648,7 @@ Filter 710 {"flow-limit":{"count":150,"log":"none"},"log inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 711 {"flow-limit":{"count":150,"interval":5}} +Filter 999 {"flow-limit":{"count":150,"interval":5}} (filter-limit) inet/filter/FORWARD -j limit-704 inet6/filter/FORWARD -j limit-704 @@ -10491,7 +12669,7 @@ Filter 711 {"flow-limit":{"count":150,"interval":5}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 712 {"action":"pass","flow-limit":{"count":150,"interval":5}} +Filter 1000 {"action":"pass","flow-limit":{"count":150,"interval":5}} (filter-limit) inet/filter/FORWARD -j limit-705 inet6/filter/FORWARD -j limit-705 @@ -10506,7 +12684,7 @@ Filter 712 {"action":"pass","flow-limit":{"count":150,"i inet/filter/limit-705 -j DROP inet6/filter/limit-705 -j DROP -Filter 713 {"flow-limit":{"count":150,"interval":5},"log":true} +Filter 1001 {"flow-limit":{"count":150,"interval":5},"log":true} (filter-limit) inet/filter/FORWARD -j limit-706 inet6/filter/FORWARD -j limit-706 @@ -10531,7 +12709,7 @@ Filter 713 {"flow-limit":{"count":150,"interval":5},"log inet/filter/logaccept-final-59 -j ACCEPT inet6/filter/logaccept-final-59 -j ACCEPT -Filter 714 {"flow-limit":{"count":150,"interval":5},"log":"none"} +Filter 1002 {"flow-limit":{"count":150,"interval":5},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-707 inet6/filter/FORWARD -j limit-707 @@ -10552,7 +12730,7 @@ Filter 714 {"flow-limit":{"count":150,"interval":5},"log inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 715 {"flow-limit":{"count":150,"interval":5,"log":false}} +Filter 1003 {"flow-limit":{"count":150,"interval":5,"log":false}} (filter-limit) inet/filter/FORWARD -j limit-708 inet6/filter/FORWARD -j limit-708 @@ -10571,7 +12749,7 @@ Filter 715 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 716 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false}} +Filter 1004 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false}} (filter-limit) inet/filter/FORWARD -j limit-709 inet6/filter/FORWARD -j limit-709 @@ -10584,7 +12762,7 @@ Filter 716 {"action":"pass","flow-limit":{"count":150,"i inet/filter/limit-709 -j DROP inet6/filter/limit-709 -j DROP -Filter 717 {"flow-limit":{"count":150,"interval":5,"log":false},"log":true} +Filter 1005 {"flow-limit":{"count":150,"interval":5,"log":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-710 inet6/filter/FORWARD -j limit-710 @@ -10607,7 +12785,7 @@ Filter 717 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/logaccept-final-60 -j ACCEPT inet6/filter/logaccept-final-60 -j ACCEPT -Filter 718 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"none"} +Filter 1006 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-711 inet6/filter/FORWARD -j limit-711 @@ -10626,7 +12804,7 @@ Filter 718 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 719 {"flow-limit":{"count":150,"interval":5,"log":"none"}} +Filter 1007 {"flow-limit":{"count":150,"interval":5,"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-712 inet6/filter/FORWARD -j limit-712 @@ -10645,7 +12823,7 @@ Filter 719 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 720 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"}} +Filter 1008 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-713 inet6/filter/FORWARD -j limit-713 @@ -10658,7 +12836,7 @@ Filter 720 {"action":"pass","flow-limit":{"count":150,"i inet/filter/limit-713 -j DROP inet6/filter/limit-713 -j DROP -Filter 721 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":true} +Filter 1009 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-714 inet6/filter/FORWARD -j limit-714 @@ -10681,7 +12859,7 @@ Filter 721 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/logaccept-final-61 -j ACCEPT inet6/filter/logaccept-final-61 -j ACCEPT -Filter 722 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"none"} +Filter 1010 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-715 inet6/filter/FORWARD -j limit-715 @@ -10700,7 +12878,7 @@ Filter 722 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 723 {"flow-limit":1,"in":"A","no-track":true,"out":"_fw"} +Filter 1011 {"flow-limit":1,"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-716 inet6/filter/INPUT -i eth0 -j limit-716 @@ -10719,7 +12897,7 @@ Filter 723 {"flow-limit":1,"in":"A","no-track":true,"out inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 724 {"action":"pass","flow-limit":1,"in":"A","no-track":true,"out":"_fw"} +Filter 1012 {"action":"pass","flow-limit":1,"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-717 inet6/filter/INPUT -i eth0 -j limit-717 @@ -10734,7 +12912,7 @@ Filter 724 {"action":"pass","flow-limit":1,"in":"A","no- inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 725 {"flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1013 {"flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-718 inet6/filter/INPUT -i eth0 -j limit-718 @@ -10755,7 +12933,7 @@ Filter 725 {"flow-limit":1,"in":"A","log":true,"no-track inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 726 {"action":"pass","flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1014 {"action":"pass","flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-719 inet6/filter/INPUT -i eth0 -j limit-719 @@ -10770,7 +12948,7 @@ Filter 726 {"action":"pass","flow-limit":1,"in":"A","log inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 727 {"flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1015 {"flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-720 inet6/filter/INPUT -i eth0 -j limit-720 @@ -10789,7 +12967,7 @@ Filter 727 {"flow-limit":1,"in":"A","log":"none","no-tra inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 728 {"action":"pass","flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1016 {"action":"pass","flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-721 inet6/filter/INPUT -i eth0 -j limit-721 @@ -10804,7 +12982,7 @@ Filter 728 {"action":"pass","flow-limit":1,"in":"A","log inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 729 {"flow-limit":{},"in":"A","no-track":true,"out":"_fw"} +Filter 1017 {"flow-limit":{},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-722 inet6/filter/INPUT -i eth0 -j limit-722 @@ -10823,7 +13001,7 @@ Filter 729 {"flow-limit":{},"in":"A","no-track":true,"ou inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 730 {"action":"pass","flow-limit":{},"in":"A","no-track":true,"out":"_fw"} +Filter 1018 {"action":"pass","flow-limit":{},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-723 inet6/filter/INPUT -i eth0 -j limit-723 @@ -10838,7 +13016,7 @@ Filter 730 {"action":"pass","flow-limit":{},"in":"A","no inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 731 {"flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1019 {"flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-724 inet6/filter/INPUT -i eth0 -j limit-724 @@ -10859,7 +13037,7 @@ Filter 731 {"flow-limit":{},"in":"A","log":true,"no-trac inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 732 {"action":"pass","flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1020 {"action":"pass","flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-725 inet6/filter/INPUT -i eth0 -j limit-725 @@ -10874,7 +13052,7 @@ Filter 732 {"action":"pass","flow-limit":{},"in":"A","lo inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 733 {"flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1021 {"flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-726 inet6/filter/INPUT -i eth0 -j limit-726 @@ -10893,7 +13071,7 @@ Filter 733 {"flow-limit":{},"in":"A","log":"none","no-tr inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 734 {"action":"pass","flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1022 {"action":"pass","flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-727 inet6/filter/INPUT -i eth0 -j limit-727 @@ -10908,7 +13086,7 @@ Filter 734 {"action":"pass","flow-limit":{},"in":"A","lo inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 735 {"flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1023 {"flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-728 inet6/filter/INPUT -i eth0 -j limit-728 @@ -10927,7 +13105,7 @@ Filter 735 {"flow-limit":{"name":"A"},"in":"A","no-track inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 736 {"action":"pass","flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1024 {"action":"pass","flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-729 inet6/filter/INPUT -i eth0 -j limit-729 @@ -10942,7 +13120,7 @@ Filter 736 {"action":"pass","flow-limit":{"name":"A"},"i inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 737 {"flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1025 {"flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-730 inet6/filter/INPUT -i eth0 -j limit-730 @@ -10963,7 +13141,7 @@ Filter 737 {"flow-limit":{"name":"A"},"in":"A","log":tru inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 738 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1026 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-731 inet6/filter/INPUT -i eth0 -j limit-731 @@ -10978,7 +13156,7 @@ Filter 738 {"action":"pass","flow-limit":{"name":"A"},"i inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 739 {"flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1027 {"flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-732 inet6/filter/INPUT -i eth0 -j limit-732 @@ -10997,7 +13175,7 @@ Filter 739 {"flow-limit":{"name":"A"},"in":"A","log":"no inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 740 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1028 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-733 inet6/filter/INPUT -i eth0 -j limit-733 @@ -11012,7 +13190,7 @@ Filter 740 {"action":"pass","flow-limit":{"name":"A"},"i inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 741 {"flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1029 {"flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-734 inet6/filter/INPUT -i eth0 -j limit-734 @@ -11031,7 +13209,7 @@ Filter 741 {"flow-limit":{"name":"A","update":false},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 742 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1030 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 @@ -11042,7 +13220,7 @@ Filter 742 {"action":"pass","flow-limit":{"name":"A","up inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 743 {"flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1031 {"flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-736 inet6/filter/INPUT -i eth0 -j limit-736 @@ -11063,7 +13241,7 @@ Filter 743 {"flow-limit":{"name":"A","update":false},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 744 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1032 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-737 inet6/filter/INPUT -i eth0 -j limit-737 @@ -11078,7 +13256,7 @@ Filter 744 {"action":"pass","flow-limit":{"name":"A","up inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 745 {"flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1033 {"flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-738 inet6/filter/INPUT -i eth0 -j limit-738 @@ -11097,7 +13275,7 @@ Filter 745 {"flow-limit":{"name":"A","update":false},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 746 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1034 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-252 inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-252 @@ -11108,7 +13286,7 @@ Filter 746 {"action":"pass","flow-limit":{"name":"A","up inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 747 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1035 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-740 inet6/filter/INPUT -i eth0 -j limit-740 @@ -11127,7 +13305,7 @@ Filter 747 {"flow-limit":{"addr":"dest","name":"A"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 748 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1036 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-741 inet6/filter/INPUT -i eth0 -j limit-741 @@ -11142,7 +13320,7 @@ Filter 748 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 749 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1037 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-742 inet6/filter/INPUT -i eth0 -j limit-742 @@ -11163,7 +13341,7 @@ Filter 749 {"flow-limit":{"addr":"dest","name":"A"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 750 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1038 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-743 inet6/filter/INPUT -i eth0 -j limit-743 @@ -11178,7 +13356,7 @@ Filter 750 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 751 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1039 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-744 inet6/filter/INPUT -i eth0 -j limit-744 @@ -11197,7 +13375,7 @@ Filter 751 {"flow-limit":{"addr":"dest","name":"A"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 752 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1040 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-745 inet6/filter/INPUT -i eth0 -j limit-745 @@ -11212,7 +13390,7 @@ Filter 752 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 753 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1041 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-746 inet6/filter/INPUT -i eth0 -j limit-746 @@ -11231,7 +13409,7 @@ Filter 753 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 754 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1042 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 @@ -11242,7 +13420,7 @@ Filter 754 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 755 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1043 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-748 inet6/filter/INPUT -i eth0 -j limit-748 @@ -11263,7 +13441,7 @@ Filter 755 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 756 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1044 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-749 inet6/filter/INPUT -i eth0 -j limit-749 @@ -11278,7 +13456,7 @@ Filter 756 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 757 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1045 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-750 inet6/filter/INPUT -i eth0 -j limit-750 @@ -11297,7 +13475,7 @@ Filter 757 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 758 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1046 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-264 inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-264 @@ -11308,7 +13486,7 @@ Filter 758 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 759 {"flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1047 {"flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-752 inet6/filter/INPUT -i eth0 -j limit-752 @@ -11327,7 +13505,7 @@ Filter 759 {"flow-limit":{"name":"C"},"in":"A","no-track inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 760 {"action":"pass","flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1048 {"action":"pass","flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-753 inet6/filter/INPUT -i eth0 -j limit-753 @@ -11342,7 +13520,7 @@ Filter 760 {"action":"pass","flow-limit":{"name":"C"},"i inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 761 {"flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1049 {"flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-754 inet6/filter/INPUT -i eth0 -j limit-754 @@ -11363,7 +13541,7 @@ Filter 761 {"flow-limit":{"name":"C"},"in":"A","log":tru inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 762 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1050 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-755 inet6/filter/INPUT -i eth0 -j limit-755 @@ -11378,7 +13556,7 @@ Filter 762 {"action":"pass","flow-limit":{"name":"C"},"i inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 763 {"flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1051 {"flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-756 inet6/filter/INPUT -i eth0 -j limit-756 @@ -11397,7 +13575,7 @@ Filter 763 {"flow-limit":{"name":"C"},"in":"A","log":"no inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 764 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1052 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-757 inet6/filter/INPUT -i eth0 -j limit-757 @@ -11412,7 +13590,7 @@ Filter 764 {"action":"pass","flow-limit":{"name":"C"},"i inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 765 {"flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1053 {"flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-758 inet6/filter/INPUT -i eth0 -j limit-758 @@ -11431,7 +13609,7 @@ Filter 765 {"flow-limit":{"name":"C","update":false},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 766 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1054 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 @@ -11442,7 +13620,7 @@ Filter 766 {"action":"pass","flow-limit":{"name":"C","up inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 767 {"flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1055 {"flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-760 inet6/filter/INPUT -i eth0 -j limit-760 @@ -11463,7 +13641,7 @@ Filter 767 {"flow-limit":{"name":"C","update":false},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 768 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1056 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-761 inet6/filter/INPUT -i eth0 -j limit-761 @@ -11478,7 +13656,7 @@ Filter 768 {"action":"pass","flow-limit":{"name":"C","up inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 769 {"flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1057 {"flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-762 inet6/filter/INPUT -i eth0 -j limit-762 @@ -11497,7 +13675,7 @@ Filter 769 {"flow-limit":{"name":"C","update":false},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 770 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1058 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-276 inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-276 @@ -11508,7 +13686,7 @@ Filter 770 {"action":"pass","flow-limit":{"name":"C","up inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 771 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1059 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-764 inet6/filter/INPUT -i eth0 -j limit-764 @@ -11527,7 +13705,7 @@ Filter 771 {"flow-limit":{"addr":"dest","name":"C"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 772 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1060 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-765 inet6/filter/INPUT -i eth0 -j limit-765 @@ -11542,7 +13720,7 @@ Filter 772 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 773 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1061 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-766 inet6/filter/INPUT -i eth0 -j limit-766 @@ -11563,7 +13741,7 @@ Filter 773 {"flow-limit":{"addr":"dest","name":"C"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 774 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1062 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-767 inet6/filter/INPUT -i eth0 -j limit-767 @@ -11578,7 +13756,7 @@ Filter 774 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 775 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1063 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-768 inet6/filter/INPUT -i eth0 -j limit-768 @@ -11597,7 +13775,7 @@ Filter 775 {"flow-limit":{"addr":"dest","name":"C"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 776 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1064 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-769 inet6/filter/INPUT -i eth0 -j limit-769 @@ -11612,7 +13790,7 @@ Filter 776 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 777 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1065 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-770 inet6/filter/INPUT -i eth0 -j limit-770 @@ -11631,7 +13809,7 @@ Filter 777 {"flow-limit":{"addr":"dest","name":"C","upda inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 778 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1066 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284 inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284 @@ -11642,7 +13820,7 @@ Filter 778 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 779 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1067 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-772 inet6/filter/INPUT -i eth0 -j limit-772 @@ -11663,7 +13841,7 @@ Filter 779 {"flow-limit":{"addr":"dest","name":"C","upda inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 780 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1068 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-773 inet6/filter/INPUT -i eth0 -j limit-773 @@ -11678,7 +13856,7 @@ Filter 780 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 781 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1069 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-774 inet6/filter/INPUT -i eth0 -j limit-774 @@ -11697,7 +13875,7 @@ Filter 781 {"flow-limit":{"addr":"dest","name":"C","upda inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 782 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1070 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-288 inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-288 @@ -11708,7 +13886,7 @@ Filter 782 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 783 {"flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1071 {"flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-776 inet6/filter/INPUT -i eth0 -j limit-776 @@ -11723,7 +13901,7 @@ Filter 783 {"flow-limit":{"log":false},"in":"A","no-trac inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 784 {"action":"pass","flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1072 {"action":"pass","flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-777 inet6/filter/INPUT -i eth0 -j limit-777 @@ -11734,7 +13912,7 @@ Filter 784 {"action":"pass","flow-limit":{"log":false}," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 785 {"flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1073 {"flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-778 inet6/filter/INPUT -i eth0 -j limit-778 @@ -11751,7 +13929,7 @@ Filter 785 {"flow-limit":{"log":false},"in":"A","log":tr inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 786 {"action":"pass","flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1074 {"action":"pass","flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-779 inet6/filter/INPUT -i eth0 -j limit-779 @@ -11762,7 +13940,7 @@ Filter 786 {"action":"pass","flow-limit":{"log":false}," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 787 {"flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1075 {"flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-780 inet6/filter/INPUT -i eth0 -j limit-780 @@ -11777,7 +13955,7 @@ Filter 787 {"flow-limit":{"log":false},"in":"A","log":"n inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 788 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1076 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-781 inet6/filter/INPUT -i eth0 -j limit-781 @@ -11788,7 +13966,7 @@ Filter 788 {"action":"pass","flow-limit":{"log":false}," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 789 {"flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1077 {"flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-782 inet6/filter/INPUT -i eth0 -j limit-782 @@ -11803,7 +13981,7 @@ Filter 789 {"flow-limit":{"log":false,"name":"A"},"in":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 790 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1078 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-783 inet6/filter/INPUT -i eth0 -j limit-783 @@ -11814,7 +13992,7 @@ Filter 790 {"action":"pass","flow-limit":{"log":false,"n inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 791 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1079 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-784 inet6/filter/INPUT -i eth0 -j limit-784 @@ -11831,7 +14009,7 @@ Filter 791 {"flow-limit":{"log":false,"name":"A"},"in":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 792 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1080 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-785 inet6/filter/INPUT -i eth0 -j limit-785 @@ -11842,7 +14020,7 @@ Filter 792 {"action":"pass","flow-limit":{"log":false,"n inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 793 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1081 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-786 inet6/filter/INPUT -i eth0 -j limit-786 @@ -11857,7 +14035,7 @@ Filter 793 {"flow-limit":{"log":false,"name":"A"},"in":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 794 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1082 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-787 inet6/filter/INPUT -i eth0 -j limit-787 @@ -11868,7 +14046,7 @@ Filter 794 {"action":"pass","flow-limit":{"log":false,"n inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 795 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1083 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-788 inet6/filter/INPUT -i eth0 -j limit-788 @@ -11883,14 +14061,14 @@ Filter 795 {"flow-limit":{"log":false,"name":"A","update inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 796 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1084 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 797 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1085 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-790 inet6/filter/INPUT -i eth0 -j limit-790 @@ -11907,7 +14085,7 @@ Filter 797 {"flow-limit":{"log":false,"name":"A","update inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 798 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1086 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-791 inet6/filter/INPUT -i eth0 -j limit-791 @@ -11918,7 +14096,7 @@ Filter 798 {"action":"pass","flow-limit":{"log":false,"n inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 799 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1087 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-792 inet6/filter/INPUT -i eth0 -j limit-792 @@ -11933,14 +14111,14 @@ Filter 799 {"flow-limit":{"log":false,"name":"A","update inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 800 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1088 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 801 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1089 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-794 inet6/filter/INPUT -i eth0 -j limit-794 @@ -11955,7 +14133,7 @@ Filter 801 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 802 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1090 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-795 inet6/filter/INPUT -i eth0 -j limit-795 @@ -11966,7 +14144,7 @@ Filter 802 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 803 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1091 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-796 inet6/filter/INPUT -i eth0 -j limit-796 @@ -11983,7 +14161,7 @@ Filter 803 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 804 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1092 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-797 inet6/filter/INPUT -i eth0 -j limit-797 @@ -11994,7 +14172,7 @@ Filter 804 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 805 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1093 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-798 inet6/filter/INPUT -i eth0 -j limit-798 @@ -12009,7 +14187,7 @@ Filter 805 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 806 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1094 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-799 inet6/filter/INPUT -i eth0 -j limit-799 @@ -12020,7 +14198,7 @@ Filter 806 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 807 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1095 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-800 inet6/filter/INPUT -i eth0 -j limit-800 @@ -12035,14 +14213,14 @@ Filter 807 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 808 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1096 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 809 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1097 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-802 inet6/filter/INPUT -i eth0 -j limit-802 @@ -12059,7 +14237,7 @@ Filter 809 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 810 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1098 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-803 inet6/filter/INPUT -i eth0 -j limit-803 @@ -12070,7 +14248,7 @@ Filter 810 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 811 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1099 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-804 inet6/filter/INPUT -i eth0 -j limit-804 @@ -12085,14 +14263,14 @@ Filter 811 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 812 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1100 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 813 {"flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1101 {"flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-806 inet6/filter/INPUT -i eth0 -j limit-806 @@ -12107,7 +14285,7 @@ Filter 813 {"flow-limit":{"log":false,"name":"C"},"in":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 814 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1102 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-807 inet6/filter/INPUT -i eth0 -j limit-807 @@ -12118,7 +14296,7 @@ Filter 814 {"action":"pass","flow-limit":{"log":false,"n inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 815 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1103 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-808 inet6/filter/INPUT -i eth0 -j limit-808 @@ -12135,7 +14313,7 @@ Filter 815 {"flow-limit":{"log":false,"name":"C"},"in":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 816 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1104 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-809 inet6/filter/INPUT -i eth0 -j limit-809 @@ -12146,7 +14324,7 @@ Filter 816 {"action":"pass","flow-limit":{"log":false,"n inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 817 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1105 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-810 inet6/filter/INPUT -i eth0 -j limit-810 @@ -12161,7 +14339,7 @@ Filter 817 {"flow-limit":{"log":false,"name":"C"},"in":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 818 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1106 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-811 inet6/filter/INPUT -i eth0 -j limit-811 @@ -12172,7 +14350,7 @@ Filter 818 {"action":"pass","flow-limit":{"log":false,"n inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 819 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1107 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-812 inet6/filter/INPUT -i eth0 -j limit-812 @@ -12187,14 +14365,14 @@ Filter 819 {"flow-limit":{"log":false,"name":"C","update inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 820 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1108 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 821 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1109 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-814 inet6/filter/INPUT -i eth0 -j limit-814 @@ -12211,7 +14389,7 @@ Filter 821 {"flow-limit":{"log":false,"name":"C","update inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 822 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1110 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-815 inet6/filter/INPUT -i eth0 -j limit-815 @@ -12222,7 +14400,7 @@ Filter 822 {"action":"pass","flow-limit":{"log":false,"n inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 823 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1111 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-816 inet6/filter/INPUT -i eth0 -j limit-816 @@ -12237,14 +14415,14 @@ Filter 823 {"flow-limit":{"log":false,"name":"C","update inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 824 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1112 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 825 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1113 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-818 inet6/filter/INPUT -i eth0 -j limit-818 @@ -12259,7 +14437,7 @@ Filter 825 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 826 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1114 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-819 inet6/filter/INPUT -i eth0 -j limit-819 @@ -12270,7 +14448,7 @@ Filter 826 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 827 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1115 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-820 inet6/filter/INPUT -i eth0 -j limit-820 @@ -12287,7 +14465,7 @@ Filter 827 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 828 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1116 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-821 inet6/filter/INPUT -i eth0 -j limit-821 @@ -12298,7 +14476,7 @@ Filter 828 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 829 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1117 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-822 inet6/filter/INPUT -i eth0 -j limit-822 @@ -12313,7 +14491,7 @@ Filter 829 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 830 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1118 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-823 inet6/filter/INPUT -i eth0 -j limit-823 @@ -12324,7 +14502,7 @@ Filter 830 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 831 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1119 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-824 inet6/filter/INPUT -i eth0 -j limit-824 @@ -12339,14 +14517,14 @@ Filter 831 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 832 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1120 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 833 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1121 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-826 inet6/filter/INPUT -i eth0 -j limit-826 @@ -12363,7 +14541,7 @@ Filter 833 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 834 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1122 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-827 inet6/filter/INPUT -i eth0 -j limit-827 @@ -12374,7 +14552,7 @@ Filter 834 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 835 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1123 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-828 inet6/filter/INPUT -i eth0 -j limit-828 @@ -12389,14 +14567,14 @@ Filter 835 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 836 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1124 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 837 {"flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1125 {"flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-830 inet6/filter/INPUT -i eth0 -j limit-830 @@ -12411,7 +14589,7 @@ Filter 837 {"flow-limit":{"log":"none"},"in":"A","no-tra inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 838 {"action":"pass","flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1126 {"action":"pass","flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-831 inet6/filter/INPUT -i eth0 -j limit-831 @@ -12422,7 +14600,7 @@ Filter 838 {"action":"pass","flow-limit":{"log":"none"}, inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 839 {"flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1127 {"flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-832 inet6/filter/INPUT -i eth0 -j limit-832 @@ -12439,7 +14617,7 @@ Filter 839 {"flow-limit":{"log":"none"},"in":"A","log":t inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 840 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1128 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-833 inet6/filter/INPUT -i eth0 -j limit-833 @@ -12450,7 +14628,7 @@ Filter 840 {"action":"pass","flow-limit":{"log":"none"}, inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 841 {"flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1129 {"flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-834 inet6/filter/INPUT -i eth0 -j limit-834 @@ -12465,7 +14643,7 @@ Filter 841 {"flow-limit":{"log":"none"},"in":"A","log":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 842 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1130 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-835 inet6/filter/INPUT -i eth0 -j limit-835 @@ -12476,7 +14654,7 @@ Filter 842 {"action":"pass","flow-limit":{"log":"none"}, inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 843 {"flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1131 {"flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-836 inet6/filter/INPUT -i eth0 -j limit-836 @@ -12491,7 +14669,7 @@ Filter 843 {"flow-limit":{"log":"none","name":"A"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 844 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1132 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-837 inet6/filter/INPUT -i eth0 -j limit-837 @@ -12502,7 +14680,7 @@ Filter 844 {"action":"pass","flow-limit":{"log":"none"," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 845 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1133 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-838 inet6/filter/INPUT -i eth0 -j limit-838 @@ -12519,7 +14697,7 @@ Filter 845 {"flow-limit":{"log":"none","name":"A"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 846 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1134 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-839 inet6/filter/INPUT -i eth0 -j limit-839 @@ -12530,7 +14708,7 @@ Filter 846 {"action":"pass","flow-limit":{"log":"none"," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 847 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1135 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-840 inet6/filter/INPUT -i eth0 -j limit-840 @@ -12545,7 +14723,7 @@ Filter 847 {"flow-limit":{"log":"none","name":"A"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 848 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1136 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-841 inet6/filter/INPUT -i eth0 -j limit-841 @@ -12556,7 +14734,7 @@ Filter 848 {"action":"pass","flow-limit":{"log":"none"," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 849 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1137 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-842 inet6/filter/INPUT -i eth0 -j limit-842 @@ -12571,14 +14749,14 @@ Filter 849 {"flow-limit":{"log":"none","name":"A","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 850 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1138 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 851 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1139 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-844 inet6/filter/INPUT -i eth0 -j limit-844 @@ -12595,7 +14773,7 @@ Filter 851 {"flow-limit":{"log":"none","name":"A","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 852 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1140 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-845 inet6/filter/INPUT -i eth0 -j limit-845 @@ -12606,7 +14784,7 @@ Filter 852 {"action":"pass","flow-limit":{"log":"none"," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 853 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1141 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-846 inet6/filter/INPUT -i eth0 -j limit-846 @@ -12621,14 +14799,14 @@ Filter 853 {"flow-limit":{"log":"none","name":"A","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 854 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1142 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 855 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1143 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-848 inet6/filter/INPUT -i eth0 -j limit-848 @@ -12643,7 +14821,7 @@ Filter 855 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 856 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1144 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-849 inet6/filter/INPUT -i eth0 -j limit-849 @@ -12654,7 +14832,7 @@ Filter 856 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 857 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1145 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-850 inet6/filter/INPUT -i eth0 -j limit-850 @@ -12671,7 +14849,7 @@ Filter 857 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 858 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1146 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-851 inet6/filter/INPUT -i eth0 -j limit-851 @@ -12682,7 +14860,7 @@ Filter 858 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 859 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1147 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-852 inet6/filter/INPUT -i eth0 -j limit-852 @@ -12697,7 +14875,7 @@ Filter 859 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 860 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1148 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-853 inet6/filter/INPUT -i eth0 -j limit-853 @@ -12708,7 +14886,7 @@ Filter 860 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 861 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1149 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-854 inet6/filter/INPUT -i eth0 -j limit-854 @@ -12723,14 +14901,14 @@ Filter 861 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 862 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1150 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 863 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1151 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-856 inet6/filter/INPUT -i eth0 -j limit-856 @@ -12747,7 +14925,7 @@ Filter 863 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 864 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1152 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-857 inet6/filter/INPUT -i eth0 -j limit-857 @@ -12758,7 +14936,7 @@ Filter 864 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 865 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1153 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-858 inet6/filter/INPUT -i eth0 -j limit-858 @@ -12773,14 +14951,14 @@ Filter 865 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 866 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1154 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 867 {"flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1155 {"flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-860 inet6/filter/INPUT -i eth0 -j limit-860 @@ -12795,7 +14973,7 @@ Filter 867 {"flow-limit":{"log":"none","name":"C"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 868 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1156 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-861 inet6/filter/INPUT -i eth0 -j limit-861 @@ -12806,7 +14984,7 @@ Filter 868 {"action":"pass","flow-limit":{"log":"none"," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 869 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1157 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-862 inet6/filter/INPUT -i eth0 -j limit-862 @@ -12823,7 +15001,7 @@ Filter 869 {"flow-limit":{"log":"none","name":"C"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 870 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1158 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-863 inet6/filter/INPUT -i eth0 -j limit-863 @@ -12834,7 +15012,7 @@ Filter 870 {"action":"pass","flow-limit":{"log":"none"," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 871 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1159 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-864 inet6/filter/INPUT -i eth0 -j limit-864 @@ -12849,7 +15027,7 @@ Filter 871 {"flow-limit":{"log":"none","name":"C"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 872 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1160 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-865 inet6/filter/INPUT -i eth0 -j limit-865 @@ -12860,7 +15038,7 @@ Filter 872 {"action":"pass","flow-limit":{"log":"none"," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 873 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1161 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-866 inet6/filter/INPUT -i eth0 -j limit-866 @@ -12875,14 +15053,14 @@ Filter 873 {"flow-limit":{"log":"none","name":"C","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 874 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1162 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 875 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1163 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-868 inet6/filter/INPUT -i eth0 -j limit-868 @@ -12899,7 +15077,7 @@ Filter 875 {"flow-limit":{"log":"none","name":"C","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 876 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1164 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-869 inet6/filter/INPUT -i eth0 -j limit-869 @@ -12910,7 +15088,7 @@ Filter 876 {"action":"pass","flow-limit":{"log":"none"," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 877 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1165 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-870 inet6/filter/INPUT -i eth0 -j limit-870 @@ -12925,14 +15103,14 @@ Filter 877 {"flow-limit":{"log":"none","name":"C","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 878 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1166 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 879 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1167 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-872 inet6/filter/INPUT -i eth0 -j limit-872 @@ -12947,7 +15125,7 @@ Filter 879 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 880 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1168 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-873 inet6/filter/INPUT -i eth0 -j limit-873 @@ -12958,7 +15136,7 @@ Filter 880 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 881 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1169 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-874 inet6/filter/INPUT -i eth0 -j limit-874 @@ -12975,7 +15153,7 @@ Filter 881 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 882 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1170 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-875 inet6/filter/INPUT -i eth0 -j limit-875 @@ -12986,7 +15164,7 @@ Filter 882 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 883 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1171 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-876 inet6/filter/INPUT -i eth0 -j limit-876 @@ -13001,7 +15179,7 @@ Filter 883 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 884 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1172 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-877 inet6/filter/INPUT -i eth0 -j limit-877 @@ -13012,7 +15190,7 @@ Filter 884 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 885 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1173 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-878 inet6/filter/INPUT -i eth0 -j limit-878 @@ -13027,14 +15205,14 @@ Filter 885 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 886 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1174 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 887 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1175 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-880 inet6/filter/INPUT -i eth0 -j limit-880 @@ -13051,7 +15229,7 @@ Filter 887 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 888 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1176 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-881 inet6/filter/INPUT -i eth0 -j limit-881 @@ -13062,7 +15240,7 @@ Filter 888 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 889 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1177 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-882 inet6/filter/INPUT -i eth0 -j limit-882 @@ -13077,14 +15255,14 @@ Filter 889 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 890 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1178 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 891 {"flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} +Filter 1179 {"flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-884 inet6/filter/INPUT -i eth0 -j limit-884 @@ -13103,7 +15281,7 @@ Filter 891 {"flow-limit":{"interval":5},"in":"A","no-tra inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 892 {"action":"pass","flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} +Filter 1180 {"action":"pass","flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-885 inet6/filter/INPUT -i eth0 -j limit-885 @@ -13118,7 +15296,7 @@ Filter 892 {"action":"pass","flow-limit":{"interval":5}, inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 893 {"flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1181 {"flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-886 inet6/filter/INPUT -i eth0 -j limit-886 @@ -13139,7 +15317,7 @@ Filter 893 {"flow-limit":{"interval":5},"in":"A","log":t inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 894 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1182 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-887 inet6/filter/INPUT -i eth0 -j limit-887 @@ -13154,7 +15332,7 @@ Filter 894 {"action":"pass","flow-limit":{"interval":5}, inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 895 {"flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1183 {"flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-888 inet6/filter/INPUT -i eth0 -j limit-888 @@ -13173,7 +15351,7 @@ Filter 895 {"flow-limit":{"interval":5},"in":"A","log":" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 896 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1184 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-889 inet6/filter/INPUT -i eth0 -j limit-889 @@ -13188,7 +15366,7 @@ Filter 896 {"action":"pass","flow-limit":{"interval":5}, inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 897 {"flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1185 {"flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-890 inet6/filter/INPUT -i eth0 -j limit-890 @@ -13207,7 +15385,7 @@ Filter 897 {"flow-limit":{"interval":5,"name":"A"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 898 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1186 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-891 inet6/filter/INPUT -i eth0 -j limit-891 @@ -13222,7 +15400,7 @@ Filter 898 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 899 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1187 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-892 inet6/filter/INPUT -i eth0 -j limit-892 @@ -13243,7 +15421,7 @@ Filter 899 {"flow-limit":{"interval":5,"name":"A"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 900 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1188 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-893 inet6/filter/INPUT -i eth0 -j limit-893 @@ -13258,7 +15436,7 @@ Filter 900 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 901 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1189 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-894 inet6/filter/INPUT -i eth0 -j limit-894 @@ -13277,7 +15455,7 @@ Filter 901 {"flow-limit":{"interval":5,"name":"A"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 902 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1190 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-895 inet6/filter/INPUT -i eth0 -j limit-895 @@ -13292,7 +15470,7 @@ Filter 902 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 903 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1191 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-896 inet6/filter/INPUT -i eth0 -j limit-896 @@ -13311,7 +15489,7 @@ Filter 903 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 904 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1192 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 @@ -13322,7 +15500,7 @@ Filter 904 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 905 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1193 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-898 inet6/filter/INPUT -i eth0 -j limit-898 @@ -13343,7 +15521,7 @@ Filter 905 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 906 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1194 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-899 inet6/filter/INPUT -i eth0 -j limit-899 @@ -13358,7 +15536,7 @@ Filter 906 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 907 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1195 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-900 inet6/filter/INPUT -i eth0 -j limit-900 @@ -13377,7 +15555,7 @@ Filter 907 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 908 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1196 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-306 inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-306 @@ -13388,7 +15566,7 @@ Filter 908 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 909 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1197 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-902 inet6/filter/INPUT -i eth0 -j limit-902 @@ -13407,7 +15585,7 @@ Filter 909 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 910 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1198 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-903 inet6/filter/INPUT -i eth0 -j limit-903 @@ -13422,7 +15600,7 @@ Filter 910 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 911 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1199 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-904 inet6/filter/INPUT -i eth0 -j limit-904 @@ -13443,7 +15621,7 @@ Filter 911 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 912 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1200 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-905 inet6/filter/INPUT -i eth0 -j limit-905 @@ -13458,7 +15636,7 @@ Filter 912 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 913 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1201 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-906 inet6/filter/INPUT -i eth0 -j limit-906 @@ -13477,7 +15655,7 @@ Filter 913 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 914 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1202 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-907 inet6/filter/INPUT -i eth0 -j limit-907 @@ -13492,7 +15670,7 @@ Filter 914 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 915 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1203 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-908 inet6/filter/INPUT -i eth0 -j limit-908 @@ -13511,7 +15689,7 @@ Filter 915 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 916 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1204 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-314 inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-314 @@ -13522,7 +15700,7 @@ Filter 916 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 917 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1205 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-910 inet6/filter/INPUT -i eth0 -j limit-910 @@ -13543,7 +15721,7 @@ Filter 917 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 918 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1206 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-911 inet6/filter/INPUT -i eth0 -j limit-911 @@ -13558,7 +15736,7 @@ Filter 918 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 919 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1207 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-912 inet6/filter/INPUT -i eth0 -j limit-912 @@ -13577,7 +15755,7 @@ Filter 919 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 920 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1208 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-318 inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-318 @@ -13588,7 +15766,7 @@ Filter 920 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 921 {"flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1209 {"flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-914 inet6/filter/INPUT -i eth0 -j limit-914 @@ -13607,7 +15785,7 @@ Filter 921 {"flow-limit":{"interval":5,"name":"C"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 922 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1210 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-915 inet6/filter/INPUT -i eth0 -j limit-915 @@ -13622,7 +15800,7 @@ Filter 922 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 923 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1211 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-916 inet6/filter/INPUT -i eth0 -j limit-916 @@ -13643,7 +15821,7 @@ Filter 923 {"flow-limit":{"interval":5,"name":"C"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 924 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1212 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-917 inet6/filter/INPUT -i eth0 -j limit-917 @@ -13658,7 +15836,7 @@ Filter 924 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 925 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1213 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-918 inet6/filter/INPUT -i eth0 -j limit-918 @@ -13677,7 +15855,7 @@ Filter 925 {"flow-limit":{"interval":5,"name":"C"},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 926 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1214 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-919 inet6/filter/INPUT -i eth0 -j limit-919 @@ -13692,7 +15870,7 @@ Filter 926 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 927 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1215 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-920 inet6/filter/INPUT -i eth0 -j limit-920 @@ -13711,7 +15889,7 @@ Filter 927 {"flow-limit":{"interval":5,"name":"C","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 928 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1216 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-326 @@ -13722,7 +15900,7 @@ Filter 928 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 929 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1217 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-922 inet6/filter/INPUT -i eth0 -j limit-922 @@ -13743,7 +15921,7 @@ Filter 929 {"flow-limit":{"interval":5,"name":"C","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 930 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1218 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-923 inet6/filter/INPUT -i eth0 -j limit-923 @@ -13758,7 +15936,7 @@ Filter 930 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 931 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1219 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-924 inet6/filter/INPUT -i eth0 -j limit-924 @@ -13777,7 +15955,7 @@ Filter 931 {"flow-limit":{"interval":5,"name":"C","updat inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 932 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1220 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-330 inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-330 @@ -13788,7 +15966,7 @@ Filter 932 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 933 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1221 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-926 inet6/filter/INPUT -i eth0 -j limit-926 @@ -13807,7 +15985,7 @@ Filter 933 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 934 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1222 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-927 inet6/filter/INPUT -i eth0 -j limit-927 @@ -13822,7 +16000,7 @@ Filter 934 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 935 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1223 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-928 inet6/filter/INPUT -i eth0 -j limit-928 @@ -13843,7 +16021,7 @@ Filter 935 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 936 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1224 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-929 inet6/filter/INPUT -i eth0 -j limit-929 @@ -13858,7 +16036,7 @@ Filter 936 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 937 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1225 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-930 inet6/filter/INPUT -i eth0 -j limit-930 @@ -13877,7 +16055,7 @@ Filter 937 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 938 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1226 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-931 inet6/filter/INPUT -i eth0 -j limit-931 @@ -13892,7 +16070,7 @@ Filter 938 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 939 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1227 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-932 inet6/filter/INPUT -i eth0 -j limit-932 @@ -13911,7 +16089,7 @@ Filter 939 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 940 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1228 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-338 inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-338 @@ -13922,7 +16100,7 @@ Filter 940 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 941 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1229 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-934 inet6/filter/INPUT -i eth0 -j limit-934 @@ -13943,7 +16121,7 @@ Filter 941 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 942 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1230 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-935 inet6/filter/INPUT -i eth0 -j limit-935 @@ -13958,7 +16136,7 @@ Filter 942 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 943 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1231 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-936 inet6/filter/INPUT -i eth0 -j limit-936 @@ -13977,7 +16155,7 @@ Filter 943 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 944 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1232 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-342 inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-342 @@ -13988,7 +16166,7 @@ Filter 944 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 945 {"flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1233 {"flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-938 inet6/filter/INPUT -i eth0 -j limit-938 @@ -14003,7 +16181,7 @@ Filter 945 {"flow-limit":{"interval":5,"log":false},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 946 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1234 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-939 inet6/filter/INPUT -i eth0 -j limit-939 @@ -14014,7 +16192,7 @@ Filter 946 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 947 {"flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1235 {"flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-940 inet6/filter/INPUT -i eth0 -j limit-940 @@ -14031,7 +16209,7 @@ Filter 947 {"flow-limit":{"interval":5,"log":false},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 948 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1236 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-941 inet6/filter/INPUT -i eth0 -j limit-941 @@ -14042,7 +16220,7 @@ Filter 948 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 949 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1237 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-942 inet6/filter/INPUT -i eth0 -j limit-942 @@ -14057,7 +16235,7 @@ Filter 949 {"flow-limit":{"interval":5,"log":false},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 950 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1238 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-943 inet6/filter/INPUT -i eth0 -j limit-943 @@ -14068,7 +16246,7 @@ Filter 950 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 951 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1239 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-944 inet6/filter/INPUT -i eth0 -j limit-944 @@ -14083,7 +16261,7 @@ Filter 951 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 952 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1240 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-945 inet6/filter/INPUT -i eth0 -j limit-945 @@ -14094,7 +16272,7 @@ Filter 952 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 953 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1241 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-946 inet6/filter/INPUT -i eth0 -j limit-946 @@ -14111,7 +16289,7 @@ Filter 953 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 954 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1242 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-947 inet6/filter/INPUT -i eth0 -j limit-947 @@ -14122,7 +16300,7 @@ Filter 954 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 955 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1243 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-948 inet6/filter/INPUT -i eth0 -j limit-948 @@ -14137,7 +16315,7 @@ Filter 955 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 956 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1244 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-949 inet6/filter/INPUT -i eth0 -j limit-949 @@ -14148,7 +16326,7 @@ Filter 956 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 957 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1245 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-950 inet6/filter/INPUT -i eth0 -j limit-950 @@ -14163,14 +16341,14 @@ Filter 957 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 958 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1246 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 959 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1247 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-952 inet6/filter/INPUT -i eth0 -j limit-952 @@ -14187,7 +16365,7 @@ Filter 959 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 960 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1248 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-953 inet6/filter/INPUT -i eth0 -j limit-953 @@ -14198,7 +16376,7 @@ Filter 960 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 961 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1249 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-954 inet6/filter/INPUT -i eth0 -j limit-954 @@ -14213,14 +16391,14 @@ Filter 961 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 962 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1250 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 963 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1251 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-956 inet6/filter/INPUT -i eth0 -j limit-956 @@ -14235,7 +16413,7 @@ Filter 963 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 964 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1252 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-957 inet6/filter/INPUT -i eth0 -j limit-957 @@ -14246,7 +16424,7 @@ Filter 964 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 965 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1253 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-958 inet6/filter/INPUT -i eth0 -j limit-958 @@ -14263,7 +16441,7 @@ Filter 965 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 966 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1254 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-959 inet6/filter/INPUT -i eth0 -j limit-959 @@ -14274,7 +16452,7 @@ Filter 966 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 967 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1255 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-960 inet6/filter/INPUT -i eth0 -j limit-960 @@ -14289,7 +16467,7 @@ Filter 967 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 968 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1256 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-961 inet6/filter/INPUT -i eth0 -j limit-961 @@ -14300,7 +16478,7 @@ Filter 968 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 969 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1257 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-962 inet6/filter/INPUT -i eth0 -j limit-962 @@ -14315,14 +16493,14 @@ Filter 969 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 970 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1258 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 971 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1259 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-964 inet6/filter/INPUT -i eth0 -j limit-964 @@ -14339,7 +16517,7 @@ Filter 971 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 972 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1260 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-965 inet6/filter/INPUT -i eth0 -j limit-965 @@ -14350,7 +16528,7 @@ Filter 972 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 973 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1261 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-966 inet6/filter/INPUT -i eth0 -j limit-966 @@ -14365,14 +16543,14 @@ Filter 973 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 974 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1262 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 975 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1263 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-968 inet6/filter/INPUT -i eth0 -j limit-968 @@ -14387,7 +16565,7 @@ Filter 975 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 976 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1264 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-969 inet6/filter/INPUT -i eth0 -j limit-969 @@ -14398,7 +16576,7 @@ Filter 976 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 977 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1265 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-970 inet6/filter/INPUT -i eth0 -j limit-970 @@ -14415,7 +16593,7 @@ Filter 977 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 978 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1266 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-971 inet6/filter/INPUT -i eth0 -j limit-971 @@ -14426,7 +16604,7 @@ Filter 978 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 979 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1267 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-972 inet6/filter/INPUT -i eth0 -j limit-972 @@ -14441,7 +16619,7 @@ Filter 979 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 980 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1268 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-973 inet6/filter/INPUT -i eth0 -j limit-973 @@ -14452,7 +16630,7 @@ Filter 980 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 981 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1269 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-974 inet6/filter/INPUT -i eth0 -j limit-974 @@ -14467,14 +16645,14 @@ Filter 981 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 982 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1270 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 983 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1271 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-976 inet6/filter/INPUT -i eth0 -j limit-976 @@ -14491,7 +16669,7 @@ Filter 983 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 984 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1272 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-977 inet6/filter/INPUT -i eth0 -j limit-977 @@ -14502,7 +16680,7 @@ Filter 984 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 985 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1273 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-978 inet6/filter/INPUT -i eth0 -j limit-978 @@ -14517,14 +16695,14 @@ Filter 985 {"flow-limit":{"interval":5,"log":false,"name inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 986 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1274 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 987 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1275 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-980 inet6/filter/INPUT -i eth0 -j limit-980 @@ -14539,7 +16717,7 @@ Filter 987 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 988 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1276 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-981 inet6/filter/INPUT -i eth0 -j limit-981 @@ -14550,7 +16728,7 @@ Filter 988 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 989 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1277 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-982 inet6/filter/INPUT -i eth0 -j limit-982 @@ -14567,7 +16745,7 @@ Filter 989 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 990 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1278 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-983 inet6/filter/INPUT -i eth0 -j limit-983 @@ -14578,7 +16756,7 @@ Filter 990 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 991 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1279 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-984 inet6/filter/INPUT -i eth0 -j limit-984 @@ -14593,7 +16771,7 @@ Filter 991 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 992 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1280 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-985 inet6/filter/INPUT -i eth0 -j limit-985 @@ -14604,7 +16782,7 @@ Filter 992 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 993 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1281 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-986 inet6/filter/INPUT -i eth0 -j limit-986 @@ -14619,14 +16797,14 @@ Filter 993 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 994 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1282 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 995 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1283 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-988 inet6/filter/INPUT -i eth0 -j limit-988 @@ -14643,7 +16821,7 @@ Filter 995 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 996 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1284 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-989 inet6/filter/INPUT -i eth0 -j limit-989 @@ -14654,7 +16832,7 @@ Filter 996 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 997 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1285 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-990 inet6/filter/INPUT -i eth0 -j limit-990 @@ -14669,14 +16847,14 @@ Filter 997 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 998 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1286 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 999 {"flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1287 {"flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-992 inet6/filter/INPUT -i eth0 -j limit-992 @@ -14691,7 +16869,7 @@ Filter 999 {"flow-limit":{"interval":5,"log":"none"},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1000 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1288 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-993 inet6/filter/INPUT -i eth0 -j limit-993 @@ -14702,7 +16880,7 @@ Filter 1000 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1001 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1289 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-994 inet6/filter/INPUT -i eth0 -j limit-994 @@ -14719,7 +16897,7 @@ Filter 1001 {"flow-limit":{"interval":5,"log":"none"},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1002 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1290 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-995 inet6/filter/INPUT -i eth0 -j limit-995 @@ -14730,7 +16908,7 @@ Filter 1002 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1003 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1291 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-996 inet6/filter/INPUT -i eth0 -j limit-996 @@ -14745,7 +16923,7 @@ Filter 1003 {"flow-limit":{"interval":5,"log":"none"},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1004 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1292 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-997 inet6/filter/INPUT -i eth0 -j limit-997 @@ -14756,7 +16934,7 @@ Filter 1004 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1005 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1293 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-998 inet6/filter/INPUT -i eth0 -j limit-998 @@ -14771,7 +16949,7 @@ Filter 1005 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1006 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1294 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-999 inet6/filter/INPUT -i eth0 -j limit-999 @@ -14782,7 +16960,7 @@ Filter 1006 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1007 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1295 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1000 inet6/filter/INPUT -i eth0 -j limit-1000 @@ -14799,7 +16977,7 @@ Filter 1007 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1008 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1296 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1001 inet6/filter/INPUT -i eth0 -j limit-1001 @@ -14810,7 +16988,7 @@ Filter 1008 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1009 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1297 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1002 inet6/filter/INPUT -i eth0 -j limit-1002 @@ -14825,7 +17003,7 @@ Filter 1009 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1010 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1298 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1003 inet6/filter/INPUT -i eth0 -j limit-1003 @@ -14836,7 +17014,7 @@ Filter 1010 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1011 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1299 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1004 inet6/filter/INPUT -i eth0 -j limit-1004 @@ -14851,14 +17029,14 @@ Filter 1011 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1012 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1300 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1013 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1301 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1006 inet6/filter/INPUT -i eth0 -j limit-1006 @@ -14875,7 +17053,7 @@ Filter 1013 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1014 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1302 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1007 inet6/filter/INPUT -i eth0 -j limit-1007 @@ -14886,7 +17064,7 @@ Filter 1014 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1015 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1303 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1008 inet6/filter/INPUT -i eth0 -j limit-1008 @@ -14901,14 +17079,14 @@ Filter 1015 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1016 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1304 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1017 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1305 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1010 inet6/filter/INPUT -i eth0 -j limit-1010 @@ -14923,7 +17101,7 @@ Filter 1017 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1018 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1306 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1011 inet6/filter/INPUT -i eth0 -j limit-1011 @@ -14934,7 +17112,7 @@ Filter 1018 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1019 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1307 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1012 inet6/filter/INPUT -i eth0 -j limit-1012 @@ -14951,7 +17129,7 @@ Filter 1019 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1020 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1308 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1013 inet6/filter/INPUT -i eth0 -j limit-1013 @@ -14962,7 +17140,7 @@ Filter 1020 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1021 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1309 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1014 inet6/filter/INPUT -i eth0 -j limit-1014 @@ -14977,7 +17155,7 @@ Filter 1021 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1022 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1310 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1015 inet6/filter/INPUT -i eth0 -j limit-1015 @@ -14988,7 +17166,7 @@ Filter 1022 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1023 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1311 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1016 inet6/filter/INPUT -i eth0 -j limit-1016 @@ -15003,14 +17181,14 @@ Filter 1023 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1024 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1312 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1025 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1313 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1018 inet6/filter/INPUT -i eth0 -j limit-1018 @@ -15027,7 +17205,7 @@ Filter 1025 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1026 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1314 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1019 inet6/filter/INPUT -i eth0 -j limit-1019 @@ -15038,7 +17216,7 @@ Filter 1026 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1027 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1315 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1020 inet6/filter/INPUT -i eth0 -j limit-1020 @@ -15053,14 +17231,14 @@ Filter 1027 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1028 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1316 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1029 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1317 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1022 inet6/filter/INPUT -i eth0 -j limit-1022 @@ -15075,7 +17253,7 @@ Filter 1029 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1030 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1318 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1023 inet6/filter/INPUT -i eth0 -j limit-1023 @@ -15086,7 +17264,7 @@ Filter 1030 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1031 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1319 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1024 inet6/filter/INPUT -i eth0 -j limit-1024 @@ -15103,7 +17281,7 @@ Filter 1031 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1032 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1320 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1025 inet6/filter/INPUT -i eth0 -j limit-1025 @@ -15114,7 +17292,7 @@ Filter 1032 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1033 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1321 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1026 inet6/filter/INPUT -i eth0 -j limit-1026 @@ -15129,7 +17307,7 @@ Filter 1033 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1034 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1322 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1027 inet6/filter/INPUT -i eth0 -j limit-1027 @@ -15140,7 +17318,7 @@ Filter 1034 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1035 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1323 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1028 inet6/filter/INPUT -i eth0 -j limit-1028 @@ -15155,14 +17333,14 @@ Filter 1035 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1036 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1324 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1037 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1325 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1030 inet6/filter/INPUT -i eth0 -j limit-1030 @@ -15179,7 +17357,7 @@ Filter 1037 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1038 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1326 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1031 inet6/filter/INPUT -i eth0 -j limit-1031 @@ -15190,7 +17368,7 @@ Filter 1038 {"action":"pass","flow-limit":{"interval":5," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1039 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1327 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1032 inet6/filter/INPUT -i eth0 -j limit-1032 @@ -15205,14 +17383,14 @@ Filter 1039 {"flow-limit":{"interval":5,"log":"none","nam inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1040 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1328 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1041 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1329 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1034 inet6/filter/INPUT -i eth0 -j limit-1034 @@ -15227,7 +17405,7 @@ Filter 1041 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1042 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1330 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1035 inet6/filter/INPUT -i eth0 -j limit-1035 @@ -15238,7 +17416,7 @@ Filter 1042 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1043 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1331 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1036 inet6/filter/INPUT -i eth0 -j limit-1036 @@ -15255,7 +17433,7 @@ Filter 1043 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1044 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1332 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1037 inet6/filter/INPUT -i eth0 -j limit-1037 @@ -15266,7 +17444,7 @@ Filter 1044 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1045 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1333 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1038 inet6/filter/INPUT -i eth0 -j limit-1038 @@ -15281,7 +17459,7 @@ Filter 1045 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1046 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1334 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1039 inet6/filter/INPUT -i eth0 -j limit-1039 @@ -15292,7 +17470,7 @@ Filter 1046 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1047 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1335 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1040 inet6/filter/INPUT -i eth0 -j limit-1040 @@ -15307,14 +17485,14 @@ Filter 1047 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1048 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1336 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1049 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1337 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1042 inet6/filter/INPUT -i eth0 -j limit-1042 @@ -15331,7 +17509,7 @@ Filter 1049 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1050 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1338 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1043 inet6/filter/INPUT -i eth0 -j limit-1043 @@ -15342,7 +17520,7 @@ Filter 1050 {"action":"pass","flow-limit":{"addr":"dest", inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1051 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1339 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1044 inet6/filter/INPUT -i eth0 -j limit-1044 @@ -15357,14 +17535,14 @@ Filter 1051 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1052 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1340 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1053 {"flow-limit":150,"in":"A","no-track":true,"out":"_fw"} +Filter 1341 {"flow-limit":150,"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1046 inet6/filter/INPUT -i eth0 -j limit-1046 @@ -15381,7 +17559,7 @@ Filter 1053 {"flow-limit":150,"in":"A","no-track":true,"o inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1054 {"action":"pass","flow-limit":150,"in":"A","no-track":true,"out":"_fw"} +Filter 1342 {"action":"pass","flow-limit":150,"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1047 inet6/filter/INPUT -i eth0 -j limit-1047 @@ -15394,16 +17572,16 @@ Filter 1054 {"action":"pass","flow-limit":150,"in":"A","n inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1055 {"flow-limit":150,"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1343 {"flow-limit":150,"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1048 inet6/filter/INPUT -i eth0 -j limit-1048 - inet/filter/limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1048 -j logaccept-7 - inet6/filter/limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1048 -j logaccept-7 - inet/filter/logaccept-7 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-7 -m limit --limit 1/second -j LOG - inet/filter/logaccept-7 -j ACCEPT - inet6/filter/logaccept-7 -j ACCEPT + inet/filter/limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1048 -j logaccept-70 + inet6/filter/limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1048 -j logaccept-70 + inet/filter/logaccept-70 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-70 -m limit --limit 1/second -j LOG + inet/filter/logaccept-70 -j ACCEPT + inet6/filter/logaccept-70 -j ACCEPT inet/filter/limit-1048 -m limit --limit 1/second -j LOG inet6/filter/limit-1048 -m limit --limit 1/second -j LOG inet/filter/limit-1048 -j DROP @@ -15415,7 +17593,7 @@ Filter 1055 {"flow-limit":150,"in":"A","log":true,"no-tra inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1056 {"flow-limit":150,"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1344 {"flow-limit":150,"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1049 inet6/filter/INPUT -i eth0 -j limit-1049 @@ -15432,7 +17610,7 @@ Filter 1056 {"flow-limit":150,"in":"A","log":"none","no-t inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1057 {"flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} +Filter 1345 {"flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1050 inet6/filter/INPUT -i eth0 -j limit-1050 @@ -15449,7 +17627,7 @@ Filter 1057 {"flow-limit":{"count":150},"in":"A","no-trac inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1058 {"action":"pass","flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} +Filter 1346 {"action":"pass","flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1051 inet6/filter/INPUT -i eth0 -j limit-1051 @@ -15462,16 +17640,16 @@ Filter 1058 {"action":"pass","flow-limit":{"count":150}," inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1059 {"flow-limit":{"count":150},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1347 {"flow-limit":{"count":150},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1052 inet6/filter/INPUT -i eth0 -j limit-1052 - inet/filter/limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1052 -j logaccept-8 - inet6/filter/limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1052 -j logaccept-8 - inet/filter/logaccept-8 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-8 -m limit --limit 1/second -j LOG - inet/filter/logaccept-8 -j ACCEPT - inet6/filter/logaccept-8 -j ACCEPT + inet/filter/limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1052 -j logaccept-71 + inet6/filter/limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1052 -j logaccept-71 + inet/filter/logaccept-71 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-71 -m limit --limit 1/second -j LOG + inet/filter/logaccept-71 -j ACCEPT + inet6/filter/logaccept-71 -j ACCEPT inet/filter/limit-1052 -m limit --limit 1/second -j LOG inet6/filter/limit-1052 -m limit --limit 1/second -j LOG inet/filter/limit-1052 -j DROP @@ -15483,7 +17661,7 @@ Filter 1059 {"flow-limit":{"count":150},"in":"A","log":tr inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1060 {"flow-limit":{"count":150},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1348 {"flow-limit":{"count":150},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1053 inet6/filter/INPUT -i eth0 -j limit-1053 @@ -15500,7 +17678,7 @@ Filter 1060 {"flow-limit":{"count":150},"in":"A","log":"n inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1061 {"flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1349 {"flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1054 inet6/filter/INPUT -i eth0 -j limit-1054 @@ -15515,7 +17693,7 @@ Filter 1061 {"flow-limit":{"count":150,"log":false},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1062 {"action":"pass","flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1350 {"action":"pass","flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1055 inet6/filter/INPUT -i eth0 -j limit-1055 @@ -15526,16 +17704,16 @@ Filter 1062 {"action":"pass","flow-limit":{"count":150,"l inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1063 {"flow-limit":{"count":150,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1351 {"flow-limit":{"count":150,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1056 inet6/filter/INPUT -i eth0 -j limit-1056 - inet/filter/limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1056 -j logaccept-9 - inet6/filter/limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1056 -j logaccept-9 - inet/filter/logaccept-9 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-9 -m limit --limit 1/second -j LOG - inet/filter/logaccept-9 -j ACCEPT - inet6/filter/logaccept-9 -j ACCEPT + inet/filter/limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1056 -j logaccept-72 + inet6/filter/limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1056 -j logaccept-72 + inet/filter/logaccept-72 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-72 -m limit --limit 1/second -j LOG + inet/filter/logaccept-72 -j ACCEPT + inet6/filter/logaccept-72 -j ACCEPT inet/filter/limit-1056 -j DROP inet6/filter/limit-1056 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -15545,7 +17723,7 @@ Filter 1063 {"flow-limit":{"count":150,"log":false},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1064 {"flow-limit":{"count":150,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1352 {"flow-limit":{"count":150,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1057 inet6/filter/INPUT -i eth0 -j limit-1057 @@ -15560,7 +17738,7 @@ Filter 1064 {"flow-limit":{"count":150,"log":false},"in": inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1065 {"flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1353 {"flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1058 inet6/filter/INPUT -i eth0 -j limit-1058 @@ -15575,7 +17753,7 @@ Filter 1065 {"flow-limit":{"count":150,"log":"none"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1066 {"action":"pass","flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1354 {"action":"pass","flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1059 inet6/filter/INPUT -i eth0 -j limit-1059 @@ -15586,16 +17764,16 @@ Filter 1066 {"action":"pass","flow-limit":{"count":150,"l inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1067 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1355 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1060 inet6/filter/INPUT -i eth0 -j limit-1060 - inet/filter/limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1060 -j logaccept-10 - inet6/filter/limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1060 -j logaccept-10 - inet/filter/logaccept-10 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-10 -m limit --limit 1/second -j LOG - inet/filter/logaccept-10 -j ACCEPT - inet6/filter/logaccept-10 -j ACCEPT + inet/filter/limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1060 -j logaccept-73 + inet6/filter/limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1060 -j logaccept-73 + inet/filter/logaccept-73 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-73 -m limit --limit 1/second -j LOG + inet/filter/logaccept-73 -j ACCEPT + inet6/filter/logaccept-73 -j ACCEPT inet/filter/limit-1060 -j DROP inet6/filter/limit-1060 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -15605,7 +17783,7 @@ Filter 1067 {"flow-limit":{"count":150,"log":"none"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1068 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1356 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1061 inet6/filter/INPUT -i eth0 -j limit-1061 @@ -15620,7 +17798,7 @@ Filter 1068 {"flow-limit":{"count":150,"log":"none"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1069 {"flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} +Filter 1357 {"flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1062 inet6/filter/INPUT -i eth0 -j limit-1062 @@ -15637,7 +17815,7 @@ Filter 1069 {"flow-limit":{"count":150,"interval":5},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1070 {"action":"pass","flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} +Filter 1358 {"action":"pass","flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1063 inet6/filter/INPUT -i eth0 -j limit-1063 @@ -15650,16 +17828,16 @@ Filter 1070 {"action":"pass","flow-limit":{"count":150,"i inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1071 {"flow-limit":{"count":150,"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1359 {"flow-limit":{"count":150,"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1064 inet6/filter/INPUT -i eth0 -j limit-1064 - inet/filter/limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1064 -j logaccept-11 - inet6/filter/limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1064 -j logaccept-11 - inet/filter/logaccept-11 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-11 -m limit --limit 1/second -j LOG - inet/filter/logaccept-11 -j ACCEPT - inet6/filter/logaccept-11 -j ACCEPT + inet/filter/limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1064 -j logaccept-74 + inet6/filter/limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1064 -j logaccept-74 + inet/filter/logaccept-74 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-74 -m limit --limit 1/second -j LOG + inet/filter/logaccept-74 -j ACCEPT + inet6/filter/logaccept-74 -j ACCEPT inet/filter/limit-1064 -m limit --limit 1/second -j LOG inet6/filter/limit-1064 -m limit --limit 1/second -j LOG inet/filter/limit-1064 -j DROP @@ -15671,7 +17849,7 @@ Filter 1071 {"flow-limit":{"count":150,"interval":5},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1072 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1360 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1065 inet6/filter/INPUT -i eth0 -j limit-1065 @@ -15688,7 +17866,7 @@ Filter 1072 {"flow-limit":{"count":150,"interval":5},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1073 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1361 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1066 inet6/filter/INPUT -i eth0 -j limit-1066 @@ -15703,7 +17881,7 @@ Filter 1073 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1074 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1362 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1067 inet6/filter/INPUT -i eth0 -j limit-1067 @@ -15714,16 +17892,16 @@ Filter 1074 {"action":"pass","flow-limit":{"count":150,"i inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1075 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1363 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1068 inet6/filter/INPUT -i eth0 -j limit-1068 - inet/filter/limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1068 -j logaccept-12 - inet6/filter/limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1068 -j logaccept-12 - inet/filter/logaccept-12 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-12 -m limit --limit 1/second -j LOG - inet/filter/logaccept-12 -j ACCEPT - inet6/filter/logaccept-12 -j ACCEPT + inet/filter/limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1068 -j logaccept-75 + inet6/filter/limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1068 -j logaccept-75 + inet/filter/logaccept-75 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-75 -m limit --limit 1/second -j LOG + inet/filter/logaccept-75 -j ACCEPT + inet6/filter/logaccept-75 -j ACCEPT inet/filter/limit-1068 -j DROP inet6/filter/limit-1068 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -15733,7 +17911,7 @@ Filter 1075 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1076 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1364 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1069 inet6/filter/INPUT -i eth0 -j limit-1069 @@ -15748,7 +17926,7 @@ Filter 1076 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1077 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1365 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1070 inet6/filter/INPUT -i eth0 -j limit-1070 @@ -15763,7 +17941,7 @@ Filter 1077 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1078 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} +Filter 1366 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1071 inet6/filter/INPUT -i eth0 -j limit-1071 @@ -15774,16 +17952,16 @@ Filter 1078 {"action":"pass","flow-limit":{"count":150,"i inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1079 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1367 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1072 inet6/filter/INPUT -i eth0 -j limit-1072 - inet/filter/limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1072 -j logaccept-13 - inet6/filter/limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1072 -j logaccept-13 - inet/filter/logaccept-13 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-13 -m limit --limit 1/second -j LOG - inet/filter/logaccept-13 -j ACCEPT - inet6/filter/logaccept-13 -j ACCEPT + inet/filter/limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1072 -j logaccept-76 + inet6/filter/limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1072 -j logaccept-76 + inet/filter/logaccept-76 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-76 -m limit --limit 1/second -j LOG + inet/filter/logaccept-76 -j ACCEPT + inet6/filter/logaccept-76 -j ACCEPT inet/filter/limit-1072 -j DROP inet6/filter/limit-1072 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack @@ -15793,7 +17971,7 @@ Filter 1079 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1080 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1368 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) inet/filter/INPUT -i eth0 -j limit-1073 inet6/filter/INPUT -i eth0 -j limit-1073 @@ -15808,7 +17986,7 @@ Filter 1080 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1081 {"update-limit":"A"} +Filter 1369 {"update-limit":"A"} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set @@ -15817,7 +17995,7 @@ Filter 1081 {"update-limit":"A"} inet/filter/OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1082 {"update-limit":"B"} +Filter 1370 {"update-limit":"B"} (filter-limit) inet/filter/FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set @@ -15826,7 +18004,7 @@ Filter 1082 {"update-limit":"B"} inet/filter/OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1083 {"update-limit":"C"} +Filter 1371 {"update-limit":"C"} (filter-limit) inet/filter/FORWARD -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set @@ -15835,7 +18013,7 @@ Filter 1083 {"update-limit":"C"} inet/filter/OUTPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/OUTPUT -m recent --name user:C --rsource --mask fe00:: --set -Filter 1084 {"update-limit":"D"} +Filter 1372 {"update-limit":"D"} (filter-limit) inet/filter/FORWARD -m recent --name user:D --rsource --mask 255.255.252.0 --set inet/filter/INPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set @@ -15844,7 +18022,7 @@ Filter 1084 {"update-limit":"D"} inet/filter/OUTPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set inet6/filter/OUTPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set -Filter 1085 {"update-limit":{"addr":"src","measure":"conn","name":"A"}} +Filter 1373 {"update-limit":{"addr":"src","measure":"conn","name":"A"}} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set @@ -15853,7 +18031,7 @@ Filter 1085 {"update-limit":{"addr":"src","measure":"conn inet/filter/OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1086 {"update-limit":{"addr":"dest","measure":"conn","name":"A"}} +Filter 1374 {"update-limit":{"addr":"dest","measure":"conn","name":"A"}} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set @@ -15862,7 +18040,7 @@ Filter 1086 {"update-limit":{"addr":"dest","measure":"con inet/filter/OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1087 {"update-limit":{"addr":"src","measure":"flow","name":"A"}} +Filter 1375 {"update-limit":{"addr":"src","measure":"flow","name":"A"}} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set @@ -15871,7 +18049,7 @@ Filter 1087 {"update-limit":{"addr":"src","measure":"flow inet/filter/OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1088 {"update-limit":{"addr":"dest","measure":"flow","name":"A"}} +Filter 1376 {"update-limit":{"addr":"dest","measure":"flow","name":"A"}} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set @@ -15880,7 +18058,7 @@ Filter 1088 {"update-limit":{"addr":"dest","measure":"flo inet/filter/OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 1089 {} +Filter 1377 {} (log) inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT @@ -15889,7 +18067,7 @@ Filter 1089 {} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1090 {"action":"drop"} +Filter 1378 {"action":"drop"} (log) inet/filter/FORWARD -j logdrop-343 inet6/filter/FORWARD -j logdrop-343 @@ -15902,7 +18080,7 @@ Filter 1090 {"action":"drop"} inet/filter/logdrop-343 -j DROP inet6/filter/logdrop-343 -j DROP -Filter 1091 {"action":"pass"} +Filter 1379 {"action":"pass"} (log) inet/filter/FORWARD inet6/filter/FORWARD @@ -15911,7 +18089,7 @@ Filter 1091 {"action":"pass"} inet/filter/OUTPUT inet6/filter/OUTPUT -Filter 1092 {"log":false} +Filter 1380 {"log":false} (log) inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT @@ -15920,7 +18098,7 @@ Filter 1092 {"log":false} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1093 {"action":"drop","log":false} +Filter 1381 {"action":"drop","log":false} (log) inet/filter/FORWARD -j DROP inet6/filter/FORWARD -j DROP @@ -15929,7 +18107,7 @@ Filter 1093 {"action":"drop","log":false} inet/filter/OUTPUT -j DROP inet6/filter/OUTPUT -j DROP -Filter 1094 {"action":"pass","log":false} +Filter 1382 {"action":"pass","log":false} (log) inet/filter/FORWARD inet6/filter/FORWARD @@ -15938,20 +18116,20 @@ Filter 1094 {"action":"pass","log":false} inet/filter/OUTPUT inet6/filter/OUTPUT -Filter 1095 {"log":true} +Filter 1383 {"log":true} (log) - inet/filter/FORWARD -j logaccept-14 - inet6/filter/FORWARD -j logaccept-14 - inet/filter/INPUT -j logaccept-14 - inet6/filter/INPUT -j logaccept-14 - inet/filter/OUTPUT -j logaccept-14 - inet6/filter/OUTPUT -j logaccept-14 - inet/filter/logaccept-14 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-14 -m limit --limit 1/second -j LOG - inet/filter/logaccept-14 -j ACCEPT - inet6/filter/logaccept-14 -j ACCEPT - -Filter 1096 {"action":"drop","log":true} + inet/filter/FORWARD -j logaccept-77 + inet6/filter/FORWARD -j logaccept-77 + inet/filter/INPUT -j logaccept-77 + inet6/filter/INPUT -j logaccept-77 + inet/filter/OUTPUT -j logaccept-77 + inet6/filter/OUTPUT -j logaccept-77 + inet/filter/logaccept-77 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-77 -m limit --limit 1/second -j LOG + inet/filter/logaccept-77 -j ACCEPT + inet6/filter/logaccept-77 -j ACCEPT + +Filter 1384 {"action":"drop","log":true} (log) inet/filter/FORWARD -j logdrop-344 inet6/filter/FORWARD -j logdrop-344 @@ -15964,18 +18142,18 @@ Filter 1096 {"action":"drop","log":true} inet/filter/logdrop-344 -j DROP inet6/filter/logdrop-344 -j DROP -Filter 1097 {"action":"pass","log":true} +Filter 1385 {"action":"pass","log":true} (log) - inet/filter/FORWARD -j logpass-0 - inet6/filter/FORWARD -j logpass-0 - inet/filter/INPUT -j logpass-0 - inet6/filter/INPUT -j logpass-0 - inet/filter/OUTPUT -j logpass-0 - inet6/filter/OUTPUT -j logpass-0 - inet/filter/logpass-0 -m limit --limit 1/second -j LOG - inet6/filter/logpass-0 -m limit --limit 1/second -j LOG - -Filter 1098 {"log":"none"} + inet/filter/FORWARD -j logpass-42 + inet6/filter/FORWARD -j logpass-42 + inet/filter/INPUT -j logpass-42 + inet6/filter/INPUT -j logpass-42 + inet/filter/OUTPUT -j logpass-42 + inet6/filter/OUTPUT -j logpass-42 + inet/filter/logpass-42 -m limit --limit 1/second -j LOG + inet6/filter/logpass-42 -m limit --limit 1/second -j LOG + +Filter 1386 {"log":"none"} (log) inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT @@ -15984,7 +18162,7 @@ Filter 1098 {"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1099 {"action":"drop","log":"none"} +Filter 1387 {"action":"drop","log":"none"} (log) inet/filter/FORWARD -j DROP inet6/filter/FORWARD -j DROP @@ -15993,7 +18171,7 @@ Filter 1099 {"action":"drop","log":"none"} inet/filter/OUTPUT -j DROP inet6/filter/OUTPUT -j DROP -Filter 1100 {"action":"pass","log":"none"} +Filter 1388 {"action":"pass","log":"none"} (log) inet/filter/FORWARD inet6/filter/FORWARD @@ -16002,7 +18180,7 @@ Filter 1100 {"action":"pass","log":"none"} inet/filter/OUTPUT inet6/filter/OUTPUT -Filter 1101 {"in":"_fw","no-track":true,"service":"http"} +Filter 1389 {"in":"_fw","no-track":true,"service":"http"} (no-track) inet/filter/OUTPUT -p tcp --dport 80 -j ACCEPT inet6/filter/OUTPUT -p tcp --dport 80 -j ACCEPT @@ -16013,7 +18191,7 @@ Filter 1101 {"in":"_fw","no-track":true,"service":"http"} inet/filter/INPUT -p tcp --sport 80 -j ACCEPT inet6/filter/INPUT -p tcp --sport 80 -j ACCEPT -Filter 1102 {"dest":"172.17.0.0\/16","no-track":true,"service":"radius","src":"172.16.0.0\/16"} +Filter 1390 {"dest":"172.17.0.0\/16","no-track":true,"service":"radius","src":"172.16.0.0\/16"} (no-track) inet/filter/FORWARD -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT inet/filter/INPUT -p tcp --dport 1812 -s 172.16.0.0/16 -d 172.17.0.0/16 -j ACCEPT @@ -16036,7 +18214,7 @@ Filter 1102 {"dest":"172.17.0.0\/16","no-track":true,"ser inet/filter/OUTPUT -p tcp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT inet/filter/OUTPUT -p udp --sport 1812 -d 172.16.0.0/16 -s 172.17.0.0/16 -j ACCEPT -Filter 1103 {"dest":"172.18.0.0\/16","no-track":true,"service":"ssh"} +Filter 1391 {"dest":"172.18.0.0\/16","no-track":true,"service":"ssh"} (no-track) inet/filter/FORWARD -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT inet/filter/INPUT -p tcp --dport 22 -d 172.18.0.0/16 -j ACCEPT @@ -16049,7 +18227,7 @@ Filter 1103 {"dest":"172.18.0.0\/16","no-track":true,"ser inet/filter/INPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT inet/filter/OUTPUT -p tcp --sport 22 -s 172.18.0.0/16 -j ACCEPT -Filter 1104 {"no-track":true,"out":"_fw","service":"ipsec"} +Filter 1392 {"no-track":true,"out":"_fw","service":"ipsec"} (no-track) inet/filter/INPUT -p esp -j ACCEPT inet6/filter/INPUT -p esp -j ACCEPT @@ -16068,7 +18246,7 @@ Filter 1104 {"no-track":true,"out":"_fw","service":"ipsec inet/filter/OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT inet6/filter/OUTPUT -p udp -m multiport --sports 500,4500 -j ACCEPT -Filter 1105 {"in":["_fw","A"]} +Filter 1393 {"in":["_fw","A"]} (zone) inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT @@ -16077,12 +18255,12 @@ Filter 1105 {"in":["_fw","A"]} inet/filter/INPUT -i eth0 -j ACCEPT inet6/filter/INPUT -i eth0 -j ACCEPT -Filter 1106 {"in":"B","out":"C"} +Filter 1394 {"in":"B","out":"C"} (zone) inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT -Filter 1107 {"out":["_fw","B"]} +Filter 1395 {"out":["_fw","B"]} (zone) inet/filter/INPUT -j ACCEPT inet6/filter/INPUT -j ACCEPT @@ -16091,7 +18269,7 @@ Filter 1107 {"out":["_fw","B"]} inet6/filter/FORWARD -o eth1 -d fc00::/7 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -Filter 1108 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} +Filter 1396 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} (zone) inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT @@ -16435,6 +18613,134 @@ hash:net family inet :FORWARD DROP [0:0] :INPUT DROP [0:0] :OUTPUT DROP [0:0] +:address-0 - [0:0] +:address-1 - [0:0] +:address-10 - [0:0] +:address-100 - [0:0] +:address-101 - [0:0] +:address-102 - [0:0] +:address-103 - [0:0] +:address-104 - [0:0] +:address-105 - [0:0] +:address-106 - [0:0] +:address-107 - [0:0] +:address-108 - [0:0] +:address-109 - [0:0] +:address-11 - [0:0] +:address-110 - [0:0] +:address-111 - [0:0] +:address-112 - [0:0] +:address-113 - [0:0] +:address-114 - [0:0] +:address-115 - [0:0] +:address-116 - [0:0] +:address-117 - [0:0] +:address-118 - [0:0] +:address-119 - [0:0] +:address-12 - [0:0] +:address-120 - [0:0] +:address-121 - [0:0] +:address-122 - [0:0] +:address-123 - [0:0] +:address-124 - [0:0] +:address-125 - [0:0] +:address-126 - [0:0] +:address-127 - [0:0] +:address-13 - [0:0] +:address-14 - [0:0] +:address-15 - [0:0] +:address-16 - [0:0] +:address-17 - [0:0] +:address-18 - [0:0] +:address-19 - [0:0] +:address-2 - [0:0] +:address-20 - [0:0] +:address-21 - [0:0] +:address-22 - [0:0] +:address-23 - [0:0] +:address-24 - [0:0] +:address-25 - [0:0] +:address-26 - [0:0] +:address-27 - [0:0] +:address-28 - [0:0] +:address-29 - [0:0] +:address-3 - [0:0] +:address-30 - [0:0] +:address-31 - [0:0] +:address-32 - [0:0] +:address-33 - [0:0] +:address-34 - [0:0] +:address-35 - [0:0] +:address-36 - [0:0] +:address-37 - [0:0] +:address-38 - [0:0] +:address-39 - [0:0] +:address-4 - [0:0] +:address-40 - [0:0] +:address-41 - [0:0] +:address-42 - [0:0] +:address-43 - [0:0] +:address-44 - [0:0] +:address-45 - [0:0] +:address-46 - [0:0] +:address-47 - [0:0] +:address-48 - [0:0] +:address-49 - [0:0] +:address-5 - [0:0] +:address-50 - [0:0] +:address-51 - [0:0] +:address-52 - [0:0] +:address-53 - [0:0] +:address-54 - [0:0] +:address-55 - [0:0] +:address-56 - [0:0] +:address-57 - [0:0] +:address-58 - [0:0] +:address-59 - [0:0] +:address-6 - [0:0] +:address-60 - [0:0] +:address-61 - [0:0] +:address-62 - [0:0] +:address-63 - [0:0] +:address-64 - [0:0] +:address-65 - [0:0] +:address-66 - [0:0] +:address-67 - [0:0] +:address-68 - [0:0] +:address-69 - [0:0] +:address-7 - [0:0] +:address-70 - [0:0] +:address-71 - [0:0] +:address-72 - [0:0] +:address-73 - [0:0] +:address-74 - [0:0] +:address-75 - [0:0] +:address-76 - [0:0] +:address-77 - [0:0] +:address-78 - [0:0] +:address-79 - [0:0] +:address-8 - [0:0] +:address-80 - [0:0] +:address-81 - [0:0] +:address-82 - [0:0] +:address-83 - [0:0] +:address-84 - [0:0] +:address-85 - [0:0] +:address-86 - [0:0] +:address-87 - [0:0] +:address-88 - [0:0] +:address-89 - [0:0] +:address-9 - [0:0] +:address-90 - [0:0] +:address-91 - [0:0] +:address-92 - [0:0] +:address-93 - [0:0] +:address-94 - [0:0] +:address-95 - [0:0] +:address-96 - [0:0] +:address-97 - [0:0] +:address-98 - [0:0] +:address-99 - [0:0] :icmp-routing - [0:0] :limit-0 - [0:0] :limit-1 - [0:0] @@ -17421,12 +19727,75 @@ hash:net family inet :logaccept-12 - [0:0] :logaccept-13 - [0:0] :logaccept-14 - [0:0] +:logaccept-15 - [0:0] +:logaccept-16 - [0:0] +:logaccept-17 - [0:0] +:logaccept-18 - [0:0] +:logaccept-19 - [0:0] :logaccept-2 - [0:0] +:logaccept-20 - [0:0] +:logaccept-21 - [0:0] +:logaccept-22 - [0:0] +:logaccept-23 - [0:0] +:logaccept-24 - [0:0] +:logaccept-25 - [0:0] +:logaccept-26 - [0:0] +:logaccept-27 - [0:0] +:logaccept-28 - [0:0] +:logaccept-29 - [0:0] :logaccept-3 - [0:0] +:logaccept-30 - [0:0] +:logaccept-31 - [0:0] +:logaccept-32 - [0:0] +:logaccept-33 - [0:0] +:logaccept-34 - [0:0] +:logaccept-35 - [0:0] +:logaccept-36 - [0:0] +:logaccept-37 - [0:0] +:logaccept-38 - [0:0] +:logaccept-39 - [0:0] :logaccept-4 - [0:0] +:logaccept-40 - [0:0] +:logaccept-41 - [0:0] +:logaccept-42 - [0:0] +:logaccept-43 - [0:0] +:logaccept-44 - [0:0] +:logaccept-45 - [0:0] +:logaccept-46 - [0:0] +:logaccept-47 - [0:0] +:logaccept-48 - [0:0] +:logaccept-49 - [0:0] :logaccept-5 - [0:0] +:logaccept-50 - [0:0] +:logaccept-51 - [0:0] +:logaccept-52 - [0:0] +:logaccept-53 - [0:0] +:logaccept-54 - [0:0] +:logaccept-55 - [0:0] +:logaccept-56 - [0:0] +:logaccept-57 - [0:0] +:logaccept-58 - [0:0] +:logaccept-59 - [0:0] :logaccept-6 - [0:0] +:logaccept-60 - [0:0] +:logaccept-61 - [0:0] +:logaccept-62 - [0:0] +:logaccept-63 - [0:0] +:logaccept-64 - [0:0] +:logaccept-65 - [0:0] +:logaccept-66 - [0:0] +:logaccept-67 - [0:0] +:logaccept-68 - [0:0] +:logaccept-69 - [0:0] :logaccept-7 - [0:0] +:logaccept-70 - [0:0] +:logaccept-71 - [0:0] +:logaccept-72 - [0:0] +:logaccept-73 - [0:0] +:logaccept-74 - [0:0] +:logaccept-75 - [0:0] +:logaccept-76 - [0:0] +:logaccept-77 - [0:0] :logaccept-8 - [0:0] :logaccept-9 - [0:0] :logaccept-final-0 - [0:0] @@ -17837,6 +20206,48 @@ hash:net family inet :logdrop-98 - [0:0] :logdrop-99 - [0:0] :logpass-0 - [0:0] +:logpass-1 - [0:0] +:logpass-10 - [0:0] +:logpass-11 - [0:0] +:logpass-12 - [0:0] +:logpass-13 - [0:0] +:logpass-14 - [0:0] +:logpass-15 - [0:0] +:logpass-16 - [0:0] +:logpass-17 - [0:0] +:logpass-18 - [0:0] +:logpass-19 - [0:0] +:logpass-2 - [0:0] +:logpass-20 - [0:0] +:logpass-21 - [0:0] +:logpass-22 - [0:0] +:logpass-23 - [0:0] +:logpass-24 - [0:0] +:logpass-25 - [0:0] +:logpass-26 - [0:0] +:logpass-27 - [0:0] +:logpass-28 - [0:0] +:logpass-29 - [0:0] +:logpass-3 - [0:0] +:logpass-30 - [0:0] +:logpass-31 - [0:0] +:logpass-32 - [0:0] +:logpass-33 - [0:0] +:logpass-34 - [0:0] +:logpass-35 - [0:0] +:logpass-36 - [0:0] +:logpass-37 - [0:0] +:logpass-38 - [0:0] +:logpass-39 - [0:0] +:logpass-4 - [0:0] +:logpass-40 - [0:0] +:logpass-41 - [0:0] +:logpass-42 - [0:0] +:logpass-5 - [0:0] +:logpass-6 - [0:0] +:logpass-7 - [0:0] +:logpass-8 - [0:0] +:logpass-9 - [0:0] :logreject-0 - [0:0] :logtarpit-0 - [0:0] :tarpit - [0:0] @@ -18202,6 +20613,446 @@ hash:net family inet -A FORWARD -j limit-358 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logpass-0 +-A FORWARD -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -d 172.16.0.0/16 +-A FORWARD -d 172.16.0.0/16 -j logaccept-1 +-A FORWARD -d 172.16.0.0/16 -j logpass-1 +-A FORWARD -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -d 172.16.0.0/16 +-A FORWARD -d 172.16.2.0/16 +-A FORWARD -d 172.16.0.0/16 -j logaccept-2 +-A FORWARD -d 172.16.2.0/16 -j logaccept-2 +-A FORWARD -d 172.16.0.0/16 -j logpass-2 +-A FORWARD -d 172.16.2.0/16 -j logpass-2 +-A FORWARD -s 10.0.0.1 -j ACCEPT +-A FORWARD -s 10.0.0.1 +-A FORWARD -s 10.0.0.1 -j logaccept-3 +-A FORWARD -s 10.0.0.1 -j logpass-3 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 +-A FORWARD -s 10.0.0.1 -j ACCEPT +-A FORWARD -s 10.0.0.2 -j ACCEPT +-A FORWARD -s 10.0.0.1 +-A FORWARD -s 10.0.0.2 +-A FORWARD -s 10.0.0.1 -j logaccept-6 +-A FORWARD -s 10.0.0.2 -j logaccept-6 +-A FORWARD -s 10.0.0.1 -j logpass-6 +-A FORWARD -s 10.0.0.2 -j logpass-6 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j logaccept-9 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-0 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-2 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-3 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-4 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-5 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-6 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-7 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-8 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-9 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-10 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-11 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-13 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-14 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-11 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-16 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-17 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-18 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-19 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-20 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-21 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-22 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-23 +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth0 +-A FORWARD -i eth0 -j logaccept-18 +-A FORWARD -i eth0 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -d 172.16.0.0/16 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-19 +-A FORWARD -i eth0 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -d 172.16.0.0/16 +-A FORWARD -i eth0 -d 172.16.2.0/16 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-20 +-A FORWARD -i eth0 -d 172.16.2.0/16 -j logaccept-20 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-14 +-A FORWARD -i eth0 -d 172.16.2.0/16 -j logpass-14 +-A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 +-A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-21 +-A FORWARD -i eth0 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-15 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-15 +-A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 +-A FORWARD -i eth0 -s 10.0.0.2 +-A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-24 +-A FORWARD -i eth0 -s 10.0.0.2 -j logaccept-24 +-A FORWARD -i eth0 -s 10.0.0.1 -j logpass-16 +-A FORWARD -i eth0 -s 10.0.0.2 -j logpass-16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-17 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-17 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-18 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-18 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-18 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-18 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j logaccept-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-24 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-25 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-26 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-28 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-29 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-30 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-31 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-30 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-32 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-33 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-34 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-35 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-36 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-37 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-38 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-39 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-33 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-33 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-21 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-21 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-40 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-41 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-42 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-43 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-44 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-45 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-46 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-47 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-36 +-A FORWARD -i eth1 -s 10.0.0.0/12 -m limit --limit 1/second -j LOG +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-24 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-24 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-48 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-49 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-50 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-51 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-52 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-53 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-54 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-55 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-56 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-57 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-58 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-59 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-60 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-61 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-62 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-63 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-64 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-65 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-66 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-67 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-68 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-69 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-70 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-71 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 +-A FORWARD -i eth2 -s 10.1.0.0/12 +-A FORWARD -i eth3 -s 10.1.0.0/12 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-45 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j logaccept-45 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j logaccept-45 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-29 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j logpass-29 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j logpass-29 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-30 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-30 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-30 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-31 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-31 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-31 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-72 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-72 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-72 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-73 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-73 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-73 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-74 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-74 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-74 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-75 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-75 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-75 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-76 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-76 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-76 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-77 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-77 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-77 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-78 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-78 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-78 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-79 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-79 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-79 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-80 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-80 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-80 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-81 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-81 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-81 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-82 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-82 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-82 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-83 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-83 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-83 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-84 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-84 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-84 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-85 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-85 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-85 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-86 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-86 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-86 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-87 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-87 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-87 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-88 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-88 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-88 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-89 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-89 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-89 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-90 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-90 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-90 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-91 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-91 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-91 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-92 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-92 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-92 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-93 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-93 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-93 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-94 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-94 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-94 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-95 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-95 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-95 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-36 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-36 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 +-A FORWARD -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j logdrop-0 -A FORWARD @@ -18763,9 +21614,9 @@ hash:net family inet -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-14 +-A FORWARD -j logaccept-77 -A FORWARD -j logdrop-344 --A FORWARD -j logpass-0 +-A FORWARD -j logpass-42 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD @@ -19188,6 +22039,294 @@ hash:net family inet -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logpass-0 +-A INPUT -d 172.16.0.0/16 -j ACCEPT +-A INPUT -d 172.16.0.0/16 +-A INPUT -d 172.16.0.0/16 -j logaccept-1 +-A INPUT -d 172.16.0.0/16 -j logpass-1 +-A INPUT -d 172.16.0.0/16 -j ACCEPT +-A INPUT -d 172.16.2.0/16 -j ACCEPT +-A INPUT -d 172.16.0.0/16 +-A INPUT -d 172.16.2.0/16 +-A INPUT -d 172.16.0.0/16 -j logaccept-2 +-A INPUT -d 172.16.2.0/16 -j logaccept-2 +-A INPUT -d 172.16.0.0/16 -j logpass-2 +-A INPUT -d 172.16.2.0/16 -j logpass-2 +-A INPUT -s 10.0.0.1 -j ACCEPT +-A INPUT -s 10.0.0.1 +-A INPUT -s 10.0.0.1 -j logaccept-3 +-A INPUT -s 10.0.0.1 -j logpass-3 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 +-A INPUT -s 10.0.0.1 -j ACCEPT +-A INPUT -s 10.0.0.2 -j ACCEPT +-A INPUT -s 10.0.0.1 +-A INPUT -s 10.0.0.2 +-A INPUT -s 10.0.0.1 -j logaccept-6 +-A INPUT -s 10.0.0.2 -j logaccept-6 +-A INPUT -s 10.0.0.1 -j logpass-6 +-A INPUT -s 10.0.0.2 -j logpass-6 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 +-A INPUT -i eth0 -j ACCEPT +-A INPUT -i eth0 +-A INPUT -i eth0 -j logaccept-18 +-A INPUT -i eth0 -m limit --limit 1/second -j LOG +-A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -d 172.16.0.0/16 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-19 +-A INPUT -i eth0 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -d 172.16.0.0/16 +-A INPUT -i eth0 -d 172.16.2.0/16 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-20 +-A INPUT -i eth0 -d 172.16.2.0/16 -j logaccept-20 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logpass-14 +-A INPUT -i eth0 -d 172.16.2.0/16 -j logpass-14 +-A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 +-A INPUT -i eth0 -s 10.0.0.1 -j logaccept-21 +-A INPUT -i eth0 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-15 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-15 +-A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 +-A INPUT -i eth0 -s 10.0.0.2 +-A INPUT -i eth0 -s 10.0.0.1 -j logaccept-24 +-A INPUT -i eth0 -s 10.0.0.2 -j logaccept-24 +-A INPUT -i eth0 -s 10.0.0.1 -j logpass-16 +-A INPUT -i eth0 -s 10.0.0.2 -j logpass-16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-17 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-17 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-18 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-18 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-18 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-18 +-A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-36 +-A INPUT -i eth1 -s 10.0.0.0/12 -m limit --limit 1/second -j LOG +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-24 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-24 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-48 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-49 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-50 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-51 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-52 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-53 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-54 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-55 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-56 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-57 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-58 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-59 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-60 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-61 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-62 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-63 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-64 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-65 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-66 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-67 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-68 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-69 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-70 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-71 +-A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 +-A INPUT -i eth2 -s 10.1.0.0/12 +-A INPUT -i eth3 -s 10.1.0.0/12 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-45 +-A INPUT -i eth2 -s 10.1.0.0/12 -j logaccept-45 +-A INPUT -i eth3 -s 10.1.0.0/12 -j logaccept-45 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logpass-29 +-A INPUT -i eth2 -s 10.1.0.0/12 -j logpass-29 +-A INPUT -i eth3 -s 10.1.0.0/12 -j logpass-29 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-30 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-30 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-30 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-31 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-31 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-31 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-72 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-72 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-72 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-73 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-73 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-73 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-74 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-74 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-74 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-75 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-75 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-75 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-76 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-76 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-76 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-77 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-77 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-77 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-78 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-78 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-78 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-79 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-79 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-79 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-80 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-80 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-80 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-81 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-81 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-81 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-82 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-82 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-82 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-83 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-83 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-83 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-84 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-84 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-84 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-85 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-85 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-85 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-86 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-86 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-86 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-87 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-87 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-87 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-88 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-88 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-88 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-89 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-89 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-89 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-90 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-90 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-90 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-91 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-91 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-91 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-92 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-92 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-92 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-93 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-93 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-93 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-94 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-94 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-94 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-95 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-95 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-95 +-A INPUT -j ACCEPT -A INPUT -j ACCEPT -A INPUT -j logdrop-0 -A INPUT @@ -19749,9 +22888,9 @@ hash:net family inet -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-14 +-A INPUT -j logaccept-77 -A INPUT -j logdrop-344 --A INPUT -j logpass-0 +-A INPUT -j logpass-42 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT @@ -20130,6 +23269,110 @@ hash:net family inet -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -j ACCEPT +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logpass-0 +-A OUTPUT -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -d 172.16.0.0/16 +-A OUTPUT -d 172.16.0.0/16 -j logaccept-1 +-A OUTPUT -d 172.16.0.0/16 -j logpass-1 +-A OUTPUT -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -d 172.16.0.0/16 +-A OUTPUT -d 172.16.2.0/16 +-A OUTPUT -d 172.16.0.0/16 -j logaccept-2 +-A OUTPUT -d 172.16.2.0/16 -j logaccept-2 +-A OUTPUT -d 172.16.0.0/16 -j logpass-2 +-A OUTPUT -d 172.16.2.0/16 -j logpass-2 +-A OUTPUT -s 10.0.0.1 -j ACCEPT +-A OUTPUT -s 10.0.0.1 +-A OUTPUT -s 10.0.0.1 -j logaccept-3 +-A OUTPUT -s 10.0.0.1 -j logpass-3 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 +-A OUTPUT -s 10.0.0.1 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -j ACCEPT +-A OUTPUT -s 10.0.0.1 +-A OUTPUT -s 10.0.0.2 +-A OUTPUT -s 10.0.0.1 -j logaccept-6 +-A OUTPUT -s 10.0.0.2 -j logaccept-6 +-A OUTPUT -s 10.0.0.1 -j logpass-6 +-A OUTPUT -s 10.0.0.2 -j logpass-6 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j logaccept-9 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-0 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-2 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-3 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-4 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-5 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-6 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-7 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-8 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-9 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-10 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-11 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-13 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-14 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-11 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-16 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-17 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-18 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-19 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-20 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-21 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-22 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-23 +-A OUTPUT -j ACCEPT -A OUTPUT -j ACCEPT -A OUTPUT -j logdrop-0 -A OUTPUT @@ -20877,9 +24120,9 @@ hash:net family inet -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-14 +-A OUTPUT -j logaccept-77 -A OUTPUT -j logdrop-344 --A OUTPUT -j logpass-0 +-A OUTPUT -j logpass-42 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT @@ -20895,6 +24138,258 @@ hash:net family inet -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT -A OUTPUT -p icmp -j icmp-routing +-A address-0 -d 172.16.0.0/16 -j ACCEPT +-A address-1 -d 172.16.0.0/16 +-A address-10 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-13 +-A address-100 -d 172.16.0.0/16 -j ACCEPT +-A address-100 -d 172.16.2.0/16 -j ACCEPT +-A address-101 -d 172.16.0.0/16 +-A address-101 -d 172.16.2.0/16 +-A address-102 -d 172.16.0.0/16 -j logaccept-56 +-A address-102 -d 172.16.2.0/16 -j logaccept-56 +-A address-103 -d 172.16.0.0/16 -j logpass-37 +-A address-103 -d 172.16.2.0/16 -j logpass-37 +-A address-104 -s 10.0.0.1 -j ACCEPT +-A address-105 -s 10.0.0.1 +-A address-106 -s 10.0.0.1 -j logaccept-57 +-A address-107 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A address-108 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-109 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-11 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-110 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-58 +-A address-111 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-112 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-112 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-113 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-113 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-114 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-59 +-A address-114 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-59 +-A address-115 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-38 +-A address-115 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-38 +-A address-116 -s 10.0.0.1 -j ACCEPT +-A address-116 -s 10.0.0.2 -j ACCEPT +-A address-117 -s 10.0.0.1 +-A address-117 -s 10.0.0.2 +-A address-118 -s 10.0.0.1 -j logaccept-60 +-A address-118 -s 10.0.0.2 -j logaccept-60 +-A address-119 -s 10.0.0.1 -j logpass-39 +-A address-119 -s 10.0.0.2 -j logpass-39 +-A address-12 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-12 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-120 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-120 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-121 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-121 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-122 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-61 +-A address-122 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-61 +-A address-123 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-40 +-A address-123 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-40 +-A address-124 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-124 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-124 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-124 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-125 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-125 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-125 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-125 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-126 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-62 +-A address-126 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-62 +-A address-126 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-62 +-A address-126 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-62 +-A address-127 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-41 +-A address-127 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-41 +-A address-127 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-41 +-A address-127 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-41 +-A address-13 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-13 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-14 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-14 +-A address-14 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-14 +-A address-15 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-10 +-A address-15 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-10 +-A address-16 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-16 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-17 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-17 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-18 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-16 +-A address-18 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-16 +-A address-19 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-12 +-A address-19 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-12 +-A address-2 -d 172.16.0.0/16 -j logaccept-10 +-A address-20 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-20 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-20 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-20 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-21 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-21 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-21 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-21 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-22 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-17 +-A address-22 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-17 +-A address-22 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-17 +-A address-22 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-17 +-A address-23 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-13 +-A address-23 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-13 +-A address-23 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-13 +-A address-23 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-13 +-A address-24 -d 172.16.0.0/16 -j ACCEPT +-A address-25 -d 172.16.0.0/16 +-A address-26 -d 172.16.0.0/16 -j logaccept-28 +-A address-27 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-28 -d 172.16.0.0/16 -j ACCEPT +-A address-28 -d 172.16.2.0/16 -j ACCEPT +-A address-29 -d 172.16.0.0/16 +-A address-29 -d 172.16.2.0/16 +-A address-3 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-30 -d 172.16.0.0/16 -j logaccept-29 +-A address-30 -d 172.16.2.0/16 -j logaccept-29 +-A address-31 -d 172.16.0.0/16 -j logpass-19 +-A address-31 -d 172.16.2.0/16 -j logpass-19 +-A address-32 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-33 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-34 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-31 +-A address-35 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-36 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-36 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-37 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-37 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-38 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-32 +-A address-38 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-32 +-A address-39 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 +-A address-39 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-20 +-A address-4 -d 172.16.0.0/16 -j ACCEPT +-A address-4 -d 172.16.2.0/16 -j ACCEPT +-A address-40 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-40 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-41 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-41 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-42 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-34 +-A address-42 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-34 +-A address-43 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-22 +-A address-43 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-22 +-A address-44 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-44 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-44 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-44 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-45 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-45 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-45 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-45 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-46 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-35 +-A address-46 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-35 +-A address-46 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-35 +-A address-46 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-35 +-A address-47 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 +-A address-47 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-23 +-A address-47 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 +-A address-47 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-23 +-A address-48 -s 10.0.0.1 -j ACCEPT +-A address-49 -s 10.0.0.1 +-A address-5 -d 172.16.0.0/16 +-A address-5 -d 172.16.2.0/16 +-A address-50 -s 10.0.0.1 -j logaccept-39 +-A address-51 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A address-52 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-53 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-54 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-40 +-A address-55 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-56 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-56 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-57 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-57 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-58 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-41 +-A address-58 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-41 +-A address-59 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-25 +-A address-59 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-25 +-A address-6 -d 172.16.0.0/16 -j logaccept-11 +-A address-6 -d 172.16.2.0/16 -j logaccept-11 +-A address-60 -s 10.0.0.1 -j ACCEPT +-A address-60 -s 10.0.0.2 -j ACCEPT +-A address-61 -s 10.0.0.1 +-A address-61 -s 10.0.0.2 +-A address-62 -s 10.0.0.1 -j logaccept-42 +-A address-62 -s 10.0.0.2 -j logaccept-42 +-A address-63 -s 10.0.0.1 -j logpass-26 +-A address-63 -s 10.0.0.2 -j logpass-26 +-A address-64 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-64 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-65 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-65 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-66 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-43 +-A address-66 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-43 +-A address-67 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-27 +-A address-67 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-27 +-A address-68 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-68 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-68 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-68 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-69 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-69 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-69 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-69 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-7 -d 172.16.0.0/16 -j logpass-9 +-A address-7 -d 172.16.2.0/16 -j logpass-9 +-A address-70 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-44 +-A address-70 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-44 +-A address-70 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-44 +-A address-70 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-44 +-A address-71 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-28 +-A address-71 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-28 +-A address-71 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-28 +-A address-71 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-28 +-A address-72 -s 10.0.0.1 -j ACCEPT +-A address-73 -s 10.0.0.1 +-A address-74 -s 10.0.0.1 -j logaccept-48 +-A address-75 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A address-76 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-77 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-78 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-49 +-A address-79 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-8 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-80 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-80 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-81 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-81 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-82 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-50 +-A address-82 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-50 +-A address-83 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-32 +-A address-83 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-32 +-A address-84 -s 10.0.0.1 -j ACCEPT +-A address-84 -s 10.0.0.2 -j ACCEPT +-A address-85 -s 10.0.0.1 +-A address-85 -s 10.0.0.2 +-A address-86 -s 10.0.0.1 -j logaccept-51 +-A address-86 -s 10.0.0.2 -j logaccept-51 +-A address-87 -s 10.0.0.1 -j logpass-33 +-A address-87 -s 10.0.0.2 -j logpass-33 +-A address-88 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-88 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-89 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-89 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-9 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-90 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-52 +-A address-90 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-52 +-A address-91 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-34 +-A address-91 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-34 +-A address-92 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-92 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-92 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-92 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-93 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-93 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-93 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-93 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-94 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-53 +-A address-94 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-53 +-A address-94 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-53 +-A address-94 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-53 +-A address-95 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-35 +-A address-95 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-35 +-A address-95 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-35 +-A address-95 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-35 +-A address-96 -d 172.16.0.0/16 -j ACCEPT +-A address-97 -d 172.16.0.0/16 +-A address-98 -d 172.16.0.0/16 -j logaccept-55 +-A address-99 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG -A icmp-routing -p icmp --icmp-type 3 -j ACCEPT -A icmp-routing -p icmp --icmp-type 11 -j ACCEPT -A icmp-routing -p icmp --icmp-type 12 -j ACCEPT @@ -21003,7 +24498,7 @@ hash:net family inet -A limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1047 -j RETURN -A limit-1047 -m limit --limit 1/second -j LOG -A limit-1047 -j DROP --A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1048 -j logaccept-7 +-A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1048 -j logaccept-70 -A limit-1048 -m limit --limit 1/second -j LOG -A limit-1048 -j DROP -A limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1049 -j ACCEPT @@ -21017,7 +24512,7 @@ hash:net family inet -A limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1051 -j RETURN -A limit-1051 -m limit --limit 1/second -j LOG -A limit-1051 -j DROP --A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1052 -j logaccept-8 +-A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1052 -j logaccept-71 -A limit-1052 -m limit --limit 1/second -j LOG -A limit-1052 -j DROP -A limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1053 -j ACCEPT @@ -21027,7 +24522,7 @@ hash:net family inet -A limit-1054 -j DROP -A limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1055 -j RETURN -A limit-1055 -j DROP --A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1056 -j logaccept-9 +-A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1056 -j logaccept-72 -A limit-1056 -j DROP -A limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1057 -j ACCEPT -A limit-1057 -j DROP @@ -21037,7 +24532,7 @@ hash:net family inet -A limit-1059 -j DROP -A limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1060 -j logaccept-10 +-A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1060 -j logaccept-73 -A limit-1060 -j DROP -A limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1061 -j ACCEPT -A limit-1061 -j DROP @@ -21047,7 +24542,7 @@ hash:net family inet -A limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1063 -j RETURN -A limit-1063 -m limit --limit 1/second -j LOG -A limit-1063 -j DROP --A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1064 -j logaccept-11 +-A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1064 -j logaccept-74 -A limit-1064 -m limit --limit 1/second -j LOG -A limit-1064 -j DROP -A limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1065 -j ACCEPT @@ -21057,7 +24552,7 @@ hash:net family inet -A limit-1066 -j DROP -A limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1067 -j RETURN -A limit-1067 -j DROP --A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1068 -j logaccept-12 +-A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1068 -j logaccept-75 -A limit-1068 -j DROP -A limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1069 -j ACCEPT -A limit-1069 -j DROP @@ -21067,7 +24562,7 @@ hash:net family inet -A limit-1070 -j DROP -A limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1071 -j RETURN -A limit-1071 -j DROP --A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1072 -j logaccept-13 +-A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1072 -j logaccept-76 -A limit-1072 -j DROP -A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1073 -j ACCEPT -A limit-1073 -j DROP @@ -21539,7 +25034,7 @@ hash:net family inet -A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-331 -j RETURN -A limit-331 -m limit --limit 1/second -j LOG -A limit-331 -j DROP --A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-0 +-A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-63 -A limit-332 -m limit --limit 1/second -j LOG -A limit-332 -j DROP -A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-333 -j ACCEPT @@ -21551,7 +25046,7 @@ hash:net family inet -A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-335 -j RETURN -A limit-335 -m limit --limit 1/second -j LOG -A limit-335 -j DROP --A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-1 +-A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-64 -A limit-336 -m limit --limit 1/second -j LOG -A limit-336 -j DROP -A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-337 -j ACCEPT @@ -21563,7 +25058,7 @@ hash:net family inet -A limit-339 -j DROP -A limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 -A limit-34 -j ACCEPT --A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-2 +-A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-65 -A limit-340 -j DROP -A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-341 -j ACCEPT -A limit-341 -j DROP @@ -21571,7 +25066,7 @@ hash:net family inet -A limit-342 -j DROP -A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-343 -j RETURN -A limit-343 -j DROP --A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-3 +-A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-66 -A limit-344 -j DROP -A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-345 -j ACCEPT -A limit-345 -j DROP @@ -21581,7 +25076,7 @@ hash:net family inet -A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-347 -j RETURN -A limit-347 -m limit --limit 1/second -j LOG -A limit-347 -j DROP --A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-4 +-A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-67 -A limit-348 -m limit --limit 1/second -j LOG -A limit-348 -j DROP -A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-349 -j ACCEPT @@ -21591,7 +25086,7 @@ hash:net family inet -A limit-350 -j DROP -A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-351 -j RETURN -A limit-351 -j DROP --A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-5 +-A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-68 -A limit-352 -j DROP -A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-353 -j ACCEPT -A limit-353 -j DROP @@ -21599,7 +25094,7 @@ hash:net family inet -A limit-354 -j DROP -A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-355 -j RETURN -A limit-355 -j DROP --A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-6 +-A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-69 -A limit-356 -j DROP -A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-357 -j ACCEPT -A limit-357 -j DROP @@ -22894,18 +26389,144 @@ hash:net family inet -A logaccept-13 -j ACCEPT -A logaccept-14 -m limit --limit 1/second -j LOG -A logaccept-14 -j ACCEPT +-A logaccept-15 -m limit --limit 1/second -j LOG +-A logaccept-15 -j ACCEPT +-A logaccept-16 -m limit --limit 1/second -j LOG +-A logaccept-16 -j ACCEPT +-A logaccept-17 -m limit --limit 1/second -j LOG +-A logaccept-17 -j ACCEPT +-A logaccept-18 -m limit --limit 1/second -j LOG +-A logaccept-18 -j ACCEPT +-A logaccept-19 -m limit --limit 1/second -j LOG +-A logaccept-19 -j ACCEPT -A logaccept-2 -m limit --limit 1/second -j LOG -A logaccept-2 -j ACCEPT +-A logaccept-20 -m limit --limit 1/second -j LOG +-A logaccept-20 -j ACCEPT +-A logaccept-21 -m limit --limit 1/second -j LOG +-A logaccept-21 -j ACCEPT +-A logaccept-22 -m limit --limit 1/second -j LOG +-A logaccept-22 -j ACCEPT +-A logaccept-23 -m limit --limit 1/second -j LOG +-A logaccept-23 -j ACCEPT +-A logaccept-24 -m limit --limit 1/second -j LOG +-A logaccept-24 -j ACCEPT +-A logaccept-25 -m limit --limit 1/second -j LOG +-A logaccept-25 -j ACCEPT +-A logaccept-26 -m limit --limit 1/second -j LOG +-A logaccept-26 -j ACCEPT +-A logaccept-27 -m limit --limit 1/second -j LOG +-A logaccept-27 -j ACCEPT +-A logaccept-28 -m limit --limit 1/second -j LOG +-A logaccept-28 -j ACCEPT +-A logaccept-29 -m limit --limit 1/second -j LOG +-A logaccept-29 -j ACCEPT -A logaccept-3 -m limit --limit 1/second -j LOG -A logaccept-3 -j ACCEPT +-A logaccept-30 -m limit --limit 1/second -j LOG +-A logaccept-30 -j ACCEPT +-A logaccept-31 -m limit --limit 1/second -j LOG +-A logaccept-31 -j ACCEPT +-A logaccept-32 -m limit --limit 1/second -j LOG +-A logaccept-32 -j ACCEPT +-A logaccept-33 -m limit --limit 1/second -j LOG +-A logaccept-33 -j ACCEPT +-A logaccept-34 -m limit --limit 1/second -j LOG +-A logaccept-34 -j ACCEPT +-A logaccept-35 -m limit --limit 1/second -j LOG +-A logaccept-35 -j ACCEPT +-A logaccept-36 -m limit --limit 1/second -j LOG +-A logaccept-36 -j ACCEPT +-A logaccept-37 -m limit --limit 1/second -j LOG +-A logaccept-37 -j ACCEPT +-A logaccept-38 -m limit --limit 1/second -j LOG +-A logaccept-38 -j ACCEPT +-A logaccept-39 -m limit --limit 1/second -j LOG +-A logaccept-39 -j ACCEPT -A logaccept-4 -m limit --limit 1/second -j LOG -A logaccept-4 -j ACCEPT +-A logaccept-40 -m limit --limit 1/second -j LOG +-A logaccept-40 -j ACCEPT +-A logaccept-41 -m limit --limit 1/second -j LOG +-A logaccept-41 -j ACCEPT +-A logaccept-42 -m limit --limit 1/second -j LOG +-A logaccept-42 -j ACCEPT +-A logaccept-43 -m limit --limit 1/second -j LOG +-A logaccept-43 -j ACCEPT +-A logaccept-44 -m limit --limit 1/second -j LOG +-A logaccept-44 -j ACCEPT +-A logaccept-45 -m limit --limit 1/second -j LOG +-A logaccept-45 -j ACCEPT +-A logaccept-46 -m limit --limit 1/second -j LOG +-A logaccept-46 -j ACCEPT +-A logaccept-47 -m limit --limit 1/second -j LOG +-A logaccept-47 -j ACCEPT +-A logaccept-48 -m limit --limit 1/second -j LOG +-A logaccept-48 -j ACCEPT +-A logaccept-49 -m limit --limit 1/second -j LOG +-A logaccept-49 -j ACCEPT -A logaccept-5 -m limit --limit 1/second -j LOG -A logaccept-5 -j ACCEPT +-A logaccept-50 -m limit --limit 1/second -j LOG +-A logaccept-50 -j ACCEPT +-A logaccept-51 -m limit --limit 1/second -j LOG +-A logaccept-51 -j ACCEPT +-A logaccept-52 -m limit --limit 1/second -j LOG +-A logaccept-52 -j ACCEPT +-A logaccept-53 -m limit --limit 1/second -j LOG +-A logaccept-53 -j ACCEPT +-A logaccept-54 -m limit --limit 1/second -j LOG +-A logaccept-54 -j ACCEPT +-A logaccept-55 -m limit --limit 1/second -j LOG +-A logaccept-55 -j ACCEPT +-A logaccept-56 -m limit --limit 1/second -j LOG +-A logaccept-56 -j ACCEPT +-A logaccept-57 -m limit --limit 1/second -j LOG +-A logaccept-57 -j ACCEPT +-A logaccept-58 -m limit --limit 1/second -j LOG +-A logaccept-58 -j ACCEPT +-A logaccept-59 -m limit --limit 1/second -j LOG +-A logaccept-59 -j ACCEPT -A logaccept-6 -m limit --limit 1/second -j LOG -A logaccept-6 -j ACCEPT +-A logaccept-60 -m limit --limit 1/second -j LOG +-A logaccept-60 -j ACCEPT +-A logaccept-61 -m limit --limit 1/second -j LOG +-A logaccept-61 -j ACCEPT +-A logaccept-62 -m limit --limit 1/second -j LOG +-A logaccept-62 -j ACCEPT +-A logaccept-63 -m limit --limit 1/second -j LOG +-A logaccept-63 -j ACCEPT +-A logaccept-64 -m limit --limit 1/second -j LOG +-A logaccept-64 -j ACCEPT +-A logaccept-65 -m limit --limit 1/second -j LOG +-A logaccept-65 -j ACCEPT +-A logaccept-66 -m limit --limit 1/second -j LOG +-A logaccept-66 -j ACCEPT +-A logaccept-67 -m limit --limit 1/second -j LOG +-A logaccept-67 -j ACCEPT +-A logaccept-68 -m limit --limit 1/second -j LOG +-A logaccept-68 -j ACCEPT +-A logaccept-69 -m limit --limit 1/second -j LOG +-A logaccept-69 -j ACCEPT -A logaccept-7 -m limit --limit 1/second -j LOG -A logaccept-7 -j ACCEPT +-A logaccept-70 -m limit --limit 1/second -j LOG +-A logaccept-70 -j ACCEPT +-A logaccept-71 -m limit --limit 1/second -j LOG +-A logaccept-71 -j ACCEPT +-A logaccept-72 -m limit --limit 1/second -j LOG +-A logaccept-72 -j ACCEPT +-A logaccept-73 -m limit --limit 1/second -j LOG +-A logaccept-73 -j ACCEPT +-A logaccept-74 -m limit --limit 1/second -j LOG +-A logaccept-74 -j ACCEPT +-A logaccept-75 -m limit --limit 1/second -j LOG +-A logaccept-75 -j ACCEPT +-A logaccept-76 -m limit --limit 1/second -j LOG +-A logaccept-76 -j ACCEPT +-A logaccept-77 -m limit --limit 1/second -j LOG +-A logaccept-77 -j ACCEPT -A logaccept-8 -m limit --limit 1/second -j LOG -A logaccept-8 -j ACCEPT -A logaccept-9 -m limit --limit 1/second -j LOG @@ -23725,6 +27346,48 @@ hash:net family inet -A logdrop-99 -m limit --limit 1/second -j LOG -A logdrop-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-1 -m limit --limit 1/second -j LOG +-A logpass-10 -m limit --limit 1/second -j LOG +-A logpass-11 -m limit --limit 1/second -j LOG +-A logpass-12 -m limit --limit 1/second -j LOG +-A logpass-13 -m limit --limit 1/second -j LOG +-A logpass-14 -m limit --limit 1/second -j LOG +-A logpass-15 -m limit --limit 1/second -j LOG +-A logpass-16 -m limit --limit 1/second -j LOG +-A logpass-17 -m limit --limit 1/second -j LOG +-A logpass-18 -m limit --limit 1/second -j LOG +-A logpass-19 -m limit --limit 1/second -j LOG +-A logpass-2 -m limit --limit 1/second -j LOG +-A logpass-20 -m limit --limit 1/second -j LOG +-A logpass-21 -m limit --limit 1/second -j LOG +-A logpass-22 -m limit --limit 1/second -j LOG +-A logpass-23 -m limit --limit 1/second -j LOG +-A logpass-24 -m limit --limit 1/second -j LOG +-A logpass-25 -m limit --limit 1/second -j LOG +-A logpass-26 -m limit --limit 1/second -j LOG +-A logpass-27 -m limit --limit 1/second -j LOG +-A logpass-28 -m limit --limit 1/second -j LOG +-A logpass-29 -m limit --limit 1/second -j LOG +-A logpass-3 -m limit --limit 1/second -j LOG +-A logpass-30 -m limit --limit 1/second -j LOG +-A logpass-31 -m limit --limit 1/second -j LOG +-A logpass-32 -m limit --limit 1/second -j LOG +-A logpass-33 -m limit --limit 1/second -j LOG +-A logpass-34 -m limit --limit 1/second -j LOG +-A logpass-35 -m limit --limit 1/second -j LOG +-A logpass-36 -m limit --limit 1/second -j LOG +-A logpass-37 -m limit --limit 1/second -j LOG +-A logpass-38 -m limit --limit 1/second -j LOG +-A logpass-39 -m limit --limit 1/second -j LOG +-A logpass-4 -m limit --limit 1/second -j LOG +-A logpass-40 -m limit --limit 1/second -j LOG +-A logpass-41 -m limit --limit 1/second -j LOG +-A logpass-42 -m limit --limit 1/second -j LOG +-A logpass-5 -m limit --limit 1/second -j LOG +-A logpass-6 -m limit --limit 1/second -j LOG +-A logpass-7 -m limit --limit 1/second -j LOG +-A logpass-8 -m limit --limit 1/second -j LOG +-A logpass-9 -m limit --limit 1/second -j LOG -A logreject-0 -m limit --limit 1/second -j LOG -A logreject-0 -j REJECT -A logtarpit-0 -m limit --limit 1/second -j LOG @@ -25317,19 +28980,25 @@ COMMIT :limit-998 - [0:0] :limit-999 - [0:0] :logaccept-0 - [0:0] -:logaccept-1 - [0:0] -:logaccept-10 - [0:0] -:logaccept-11 - [0:0] -:logaccept-12 - [0:0] -:logaccept-13 - [0:0] -:logaccept-14 - [0:0] -:logaccept-2 - [0:0] -:logaccept-3 - [0:0] -:logaccept-4 - [0:0] -:logaccept-5 - [0:0] -:logaccept-6 - [0:0] -:logaccept-7 - [0:0] -:logaccept-8 - [0:0] +:logaccept-18 - [0:0] +:logaccept-27 - [0:0] +:logaccept-36 - [0:0] +:logaccept-45 - [0:0] +:logaccept-63 - [0:0] +:logaccept-64 - [0:0] +:logaccept-65 - [0:0] +:logaccept-66 - [0:0] +:logaccept-67 - [0:0] +:logaccept-68 - [0:0] +:logaccept-69 - [0:0] +:logaccept-70 - [0:0] +:logaccept-71 - [0:0] +:logaccept-72 - [0:0] +:logaccept-73 - [0:0] +:logaccept-74 - [0:0] +:logaccept-75 - [0:0] +:logaccept-76 - [0:0] +:logaccept-77 - [0:0] :logaccept-9 - [0:0] :logaccept-final-0 - [0:0] :logaccept-final-1 - [0:0] @@ -25739,6 +29408,8 @@ COMMIT :logdrop-98 - [0:0] :logdrop-99 - [0:0] :logpass-0 - [0:0] +:logpass-29 - [0:0] +:logpass-42 - [0:0] :logreject-0 - [0:0] :logtarpit-0 - [0:0] :tarpit - [0:0] @@ -26104,6 +29775,30 @@ COMMIT -A FORWARD -j limit-358 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logpass-0 +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 +-A FORWARD -o eth1 -d fc00::/7 -j logaccept-9 +-A FORWARD -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth0 +-A FORWARD -i eth0 -j logaccept-18 +-A FORWARD -i eth0 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j logaccept-27 +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG +-A FORWARD -i eth1 -s fc00::/7 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 +-A FORWARD -i eth1 -s fc00::/7 -j logaccept-36 +-A FORWARD -i eth1 -s fc00::/7 -m limit --limit 1/second -j LOG +-A FORWARD -i eth1 -s fc00::/7 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 +-A FORWARD -i eth1 -s fc00::/7 -j logaccept-45 +-A FORWARD -i eth1 -s fc00::/7 -j logpass-29 +-A FORWARD -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j logdrop-0 -A FORWARD @@ -26665,9 +30360,9 @@ COMMIT -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-14 +-A FORWARD -j logaccept-77 -A FORWARD -j logdrop-344 --A FORWARD -j logpass-0 +-A FORWARD -j logpass-42 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD @@ -27060,6 +30755,22 @@ COMMIT -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logpass-0 +-A INPUT -i eth0 -j ACCEPT +-A INPUT -i eth0 +-A INPUT -i eth0 -j logaccept-18 +-A INPUT -i eth0 -m limit --limit 1/second -j LOG +-A INPUT -i eth1 -s fc00::/7 -j ACCEPT +-A INPUT -i eth1 -s fc00::/7 +-A INPUT -i eth1 -s fc00::/7 -j logaccept-36 +-A INPUT -i eth1 -s fc00::/7 -m limit --limit 1/second -j LOG +-A INPUT -i eth1 -s fc00::/7 -j ACCEPT +-A INPUT -i eth1 -s fc00::/7 +-A INPUT -i eth1 -s fc00::/7 -j logaccept-45 +-A INPUT -i eth1 -s fc00::/7 -j logpass-29 +-A INPUT -j ACCEPT -A INPUT -j ACCEPT -A INPUT -j logdrop-0 -A INPUT @@ -27621,9 +31332,9 @@ COMMIT -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-14 +-A INPUT -j logaccept-77 -A INPUT -j logdrop-344 --A INPUT -j logpass-0 +-A INPUT -j logpass-42 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT @@ -27996,6 +31707,14 @@ COMMIT -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -j ACCEPT +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logpass-0 +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 +-A OUTPUT -o eth1 -d fc00::/7 -j logaccept-9 +-A OUTPUT -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG +-A OUTPUT -j ACCEPT -A OUTPUT -j ACCEPT -A OUTPUT -j logdrop-0 -A OUTPUT @@ -28743,9 +32462,9 @@ COMMIT -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-14 +-A OUTPUT -j logaccept-77 -A OUTPUT -j logdrop-344 --A OUTPUT -j logpass-0 +-A OUTPUT -j logpass-42 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT @@ -28864,7 +32583,7 @@ COMMIT -A limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1047 -j RETURN -A limit-1047 -m limit --limit 1/second -j LOG -A limit-1047 -j DROP --A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1048 -j logaccept-7 +-A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1048 -j logaccept-70 -A limit-1048 -m limit --limit 1/second -j LOG -A limit-1048 -j DROP -A limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1049 -j ACCEPT @@ -28878,7 +32597,7 @@ COMMIT -A limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1051 -j RETURN -A limit-1051 -m limit --limit 1/second -j LOG -A limit-1051 -j DROP --A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1052 -j logaccept-8 +-A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1052 -j logaccept-71 -A limit-1052 -m limit --limit 1/second -j LOG -A limit-1052 -j DROP -A limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1053 -j ACCEPT @@ -28888,7 +32607,7 @@ COMMIT -A limit-1054 -j DROP -A limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1055 -j RETURN -A limit-1055 -j DROP --A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1056 -j logaccept-9 +-A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1056 -j logaccept-72 -A limit-1056 -j DROP -A limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1057 -j ACCEPT -A limit-1057 -j DROP @@ -28898,7 +32617,7 @@ COMMIT -A limit-1059 -j DROP -A limit-106 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1060 -j logaccept-10 +-A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1060 -j logaccept-73 -A limit-1060 -j DROP -A limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1061 -j ACCEPT -A limit-1061 -j DROP @@ -28908,7 +32627,7 @@ COMMIT -A limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1063 -j RETURN -A limit-1063 -m limit --limit 1/second -j LOG -A limit-1063 -j DROP --A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1064 -j logaccept-11 +-A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1064 -j logaccept-74 -A limit-1064 -m limit --limit 1/second -j LOG -A limit-1064 -j DROP -A limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1065 -j ACCEPT @@ -28918,7 +32637,7 @@ COMMIT -A limit-1066 -j DROP -A limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1067 -j RETURN -A limit-1067 -j DROP --A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1068 -j logaccept-12 +-A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1068 -j logaccept-75 -A limit-1068 -j DROP -A limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1069 -j ACCEPT -A limit-1069 -j DROP @@ -28928,7 +32647,7 @@ COMMIT -A limit-1070 -j DROP -A limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1071 -j RETURN -A limit-1071 -j DROP --A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1072 -j logaccept-13 +-A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1072 -j logaccept-76 -A limit-1072 -j DROP -A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1073 -j ACCEPT -A limit-1073 -j DROP @@ -29400,7 +33119,7 @@ COMMIT -A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-331 -j RETURN -A limit-331 -m limit --limit 1/second -j LOG -A limit-331 -j DROP --A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-0 +-A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-63 -A limit-332 -m limit --limit 1/second -j LOG -A limit-332 -j DROP -A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-333 -j ACCEPT @@ -29412,7 +33131,7 @@ COMMIT -A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-335 -j RETURN -A limit-335 -m limit --limit 1/second -j LOG -A limit-335 -j DROP --A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-1 +-A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-64 -A limit-336 -m limit --limit 1/second -j LOG -A limit-336 -j DROP -A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-337 -j ACCEPT @@ -29424,7 +33143,7 @@ COMMIT -A limit-339 -j DROP -A limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 -A limit-34 -j ACCEPT --A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-2 +-A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-65 -A limit-340 -j DROP -A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-341 -j ACCEPT -A limit-341 -j DROP @@ -29432,7 +33151,7 @@ COMMIT -A limit-342 -j DROP -A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-343 -j RETURN -A limit-343 -j DROP --A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-3 +-A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-66 -A limit-344 -j DROP -A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-345 -j ACCEPT -A limit-345 -j DROP @@ -29442,7 +33161,7 @@ COMMIT -A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-347 -j RETURN -A limit-347 -m limit --limit 1/second -j LOG -A limit-347 -j DROP --A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-4 +-A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-67 -A limit-348 -m limit --limit 1/second -j LOG -A limit-348 -j DROP -A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-349 -j ACCEPT @@ -29452,7 +33171,7 @@ COMMIT -A limit-350 -j DROP -A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-351 -j RETURN -A limit-351 -j DROP --A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-5 +-A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-68 -A limit-352 -j DROP -A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-353 -j ACCEPT -A limit-353 -j DROP @@ -29460,7 +33179,7 @@ COMMIT -A limit-354 -j DROP -A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-355 -j RETURN -A limit-355 -j DROP --A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-6 +-A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-69 -A limit-356 -j DROP -A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-357 -j ACCEPT -A limit-357 -j DROP @@ -30743,32 +34462,44 @@ COMMIT -A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT --A logaccept-1 -m limit --limit 1/second -j LOG --A logaccept-1 -j ACCEPT --A logaccept-10 -m limit --limit 1/second -j LOG --A logaccept-10 -j ACCEPT --A logaccept-11 -m limit --limit 1/second -j LOG --A logaccept-11 -j ACCEPT --A logaccept-12 -m limit --limit 1/second -j LOG --A logaccept-12 -j ACCEPT --A logaccept-13 -m limit --limit 1/second -j LOG --A logaccept-13 -j ACCEPT --A logaccept-14 -m limit --limit 1/second -j LOG --A logaccept-14 -j ACCEPT --A logaccept-2 -m limit --limit 1/second -j LOG --A logaccept-2 -j ACCEPT --A logaccept-3 -m limit --limit 1/second -j LOG --A logaccept-3 -j ACCEPT --A logaccept-4 -m limit --limit 1/second -j LOG --A logaccept-4 -j ACCEPT --A logaccept-5 -m limit --limit 1/second -j LOG --A logaccept-5 -j ACCEPT --A logaccept-6 -m limit --limit 1/second -j LOG --A logaccept-6 -j ACCEPT --A logaccept-7 -m limit --limit 1/second -j LOG --A logaccept-7 -j ACCEPT --A logaccept-8 -m limit --limit 1/second -j LOG --A logaccept-8 -j ACCEPT +-A logaccept-18 -m limit --limit 1/second -j LOG +-A logaccept-18 -j ACCEPT +-A logaccept-27 -m limit --limit 1/second -j LOG +-A logaccept-27 -j ACCEPT +-A logaccept-36 -m limit --limit 1/second -j LOG +-A logaccept-36 -j ACCEPT +-A logaccept-45 -m limit --limit 1/second -j LOG +-A logaccept-45 -j ACCEPT +-A logaccept-63 -m limit --limit 1/second -j LOG +-A logaccept-63 -j ACCEPT +-A logaccept-64 -m limit --limit 1/second -j LOG +-A logaccept-64 -j ACCEPT +-A logaccept-65 -m limit --limit 1/second -j LOG +-A logaccept-65 -j ACCEPT +-A logaccept-66 -m limit --limit 1/second -j LOG +-A logaccept-66 -j ACCEPT +-A logaccept-67 -m limit --limit 1/second -j LOG +-A logaccept-67 -j ACCEPT +-A logaccept-68 -m limit --limit 1/second -j LOG +-A logaccept-68 -j ACCEPT +-A logaccept-69 -m limit --limit 1/second -j LOG +-A logaccept-69 -j ACCEPT +-A logaccept-70 -m limit --limit 1/second -j LOG +-A logaccept-70 -j ACCEPT +-A logaccept-71 -m limit --limit 1/second -j LOG +-A logaccept-71 -j ACCEPT +-A logaccept-72 -m limit --limit 1/second -j LOG +-A logaccept-72 -j ACCEPT +-A logaccept-73 -m limit --limit 1/second -j LOG +-A logaccept-73 -j ACCEPT +-A logaccept-74 -m limit --limit 1/second -j LOG +-A logaccept-74 -j ACCEPT +-A logaccept-75 -m limit --limit 1/second -j LOG +-A logaccept-75 -j ACCEPT +-A logaccept-76 -m limit --limit 1/second -j LOG +-A logaccept-76 -j ACCEPT +-A logaccept-77 -m limit --limit 1/second -j LOG +-A logaccept-77 -j ACCEPT -A logaccept-9 -m limit --limit 1/second -j LOG -A logaccept-9 -j ACCEPT -A logaccept-final-0 -m limit --limit 1/second -j LOG @@ -31586,6 +35317,8 @@ COMMIT -A logdrop-99 -m limit --limit 1/second -j LOG -A logdrop-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-29 -m limit --limit 1/second -j LOG +-A logpass-42 -m limit --limit 1/second -j LOG -A logreject-0 -m limit --limit 1/second -j LOG -A logreject-0 -j REJECT -A logtarpit-0 -m limit --limit 1/second -j LOG diff --git a/test/output/rules-save b/test/output/rules-save index 263cedb..7a9bc99 100644 --- a/test/output/rules-save +++ b/test/output/rules-save @@ -3,6 +3,134 @@ :FORWARD DROP [0:0] :INPUT DROP [0:0] :OUTPUT DROP [0:0] +:address-0 - [0:0] +:address-1 - [0:0] +:address-10 - [0:0] +:address-100 - [0:0] +:address-101 - [0:0] +:address-102 - [0:0] +:address-103 - [0:0] +:address-104 - [0:0] +:address-105 - [0:0] +:address-106 - [0:0] +:address-107 - [0:0] +:address-108 - [0:0] +:address-109 - [0:0] +:address-11 - [0:0] +:address-110 - [0:0] +:address-111 - [0:0] +:address-112 - [0:0] +:address-113 - [0:0] +:address-114 - [0:0] +:address-115 - [0:0] +:address-116 - [0:0] +:address-117 - [0:0] +:address-118 - [0:0] +:address-119 - [0:0] +:address-12 - [0:0] +:address-120 - [0:0] +:address-121 - [0:0] +:address-122 - [0:0] +:address-123 - [0:0] +:address-124 - [0:0] +:address-125 - [0:0] +:address-126 - [0:0] +:address-127 - [0:0] +:address-13 - [0:0] +:address-14 - [0:0] +:address-15 - [0:0] +:address-16 - [0:0] +:address-17 - [0:0] +:address-18 - [0:0] +:address-19 - [0:0] +:address-2 - [0:0] +:address-20 - [0:0] +:address-21 - [0:0] +:address-22 - [0:0] +:address-23 - [0:0] +:address-24 - [0:0] +:address-25 - [0:0] +:address-26 - [0:0] +:address-27 - [0:0] +:address-28 - [0:0] +:address-29 - [0:0] +:address-3 - [0:0] +:address-30 - [0:0] +:address-31 - [0:0] +:address-32 - [0:0] +:address-33 - [0:0] +:address-34 - [0:0] +:address-35 - [0:0] +:address-36 - [0:0] +:address-37 - [0:0] +:address-38 - [0:0] +:address-39 - [0:0] +:address-4 - [0:0] +:address-40 - [0:0] +:address-41 - [0:0] +:address-42 - [0:0] +:address-43 - [0:0] +:address-44 - [0:0] +:address-45 - [0:0] +:address-46 - [0:0] +:address-47 - [0:0] +:address-48 - [0:0] +:address-49 - [0:0] +:address-5 - [0:0] +:address-50 - [0:0] +:address-51 - [0:0] +:address-52 - [0:0] +:address-53 - [0:0] +:address-54 - [0:0] +:address-55 - [0:0] +:address-56 - [0:0] +:address-57 - [0:0] +:address-58 - [0:0] +:address-59 - [0:0] +:address-6 - [0:0] +:address-60 - [0:0] +:address-61 - [0:0] +:address-62 - [0:0] +:address-63 - [0:0] +:address-64 - [0:0] +:address-65 - [0:0] +:address-66 - [0:0] +:address-67 - [0:0] +:address-68 - [0:0] +:address-69 - [0:0] +:address-7 - [0:0] +:address-70 - [0:0] +:address-71 - [0:0] +:address-72 - [0:0] +:address-73 - [0:0] +:address-74 - [0:0] +:address-75 - [0:0] +:address-76 - [0:0] +:address-77 - [0:0] +:address-78 - [0:0] +:address-79 - [0:0] +:address-8 - [0:0] +:address-80 - [0:0] +:address-81 - [0:0] +:address-82 - [0:0] +:address-83 - [0:0] +:address-84 - [0:0] +:address-85 - [0:0] +:address-86 - [0:0] +:address-87 - [0:0] +:address-88 - [0:0] +:address-89 - [0:0] +:address-9 - [0:0] +:address-90 - [0:0] +:address-91 - [0:0] +:address-92 - [0:0] +:address-93 - [0:0] +:address-94 - [0:0] +:address-95 - [0:0] +:address-96 - [0:0] +:address-97 - [0:0] +:address-98 - [0:0] +:address-99 - [0:0] :icmp-routing - [0:0] :limit-0 - [0:0] :limit-1 - [0:0] @@ -989,12 +1117,75 @@ :logaccept-12 - [0:0] :logaccept-13 - [0:0] :logaccept-14 - [0:0] +:logaccept-15 - [0:0] +:logaccept-16 - [0:0] +:logaccept-17 - [0:0] +:logaccept-18 - [0:0] +:logaccept-19 - [0:0] :logaccept-2 - [0:0] +:logaccept-20 - [0:0] +:logaccept-21 - [0:0] +:logaccept-22 - [0:0] +:logaccept-23 - [0:0] +:logaccept-24 - [0:0] +:logaccept-25 - [0:0] +:logaccept-26 - [0:0] +:logaccept-27 - [0:0] +:logaccept-28 - [0:0] +:logaccept-29 - [0:0] :logaccept-3 - [0:0] +:logaccept-30 - [0:0] +:logaccept-31 - [0:0] +:logaccept-32 - [0:0] +:logaccept-33 - [0:0] +:logaccept-34 - [0:0] +:logaccept-35 - [0:0] +:logaccept-36 - [0:0] +:logaccept-37 - [0:0] +:logaccept-38 - [0:0] +:logaccept-39 - [0:0] :logaccept-4 - [0:0] +:logaccept-40 - [0:0] +:logaccept-41 - [0:0] +:logaccept-42 - [0:0] +:logaccept-43 - [0:0] +:logaccept-44 - [0:0] +:logaccept-45 - [0:0] +:logaccept-46 - [0:0] +:logaccept-47 - [0:0] +:logaccept-48 - [0:0] +:logaccept-49 - [0:0] :logaccept-5 - [0:0] +:logaccept-50 - [0:0] +:logaccept-51 - [0:0] +:logaccept-52 - [0:0] +:logaccept-53 - [0:0] +:logaccept-54 - [0:0] +:logaccept-55 - [0:0] +:logaccept-56 - [0:0] +:logaccept-57 - [0:0] +:logaccept-58 - [0:0] +:logaccept-59 - [0:0] :logaccept-6 - [0:0] +:logaccept-60 - [0:0] +:logaccept-61 - [0:0] +:logaccept-62 - [0:0] +:logaccept-63 - [0:0] +:logaccept-64 - [0:0] +:logaccept-65 - [0:0] +:logaccept-66 - [0:0] +:logaccept-67 - [0:0] +:logaccept-68 - [0:0] +:logaccept-69 - [0:0] :logaccept-7 - [0:0] +:logaccept-70 - [0:0] +:logaccept-71 - [0:0] +:logaccept-72 - [0:0] +:logaccept-73 - [0:0] +:logaccept-74 - [0:0] +:logaccept-75 - [0:0] +:logaccept-76 - [0:0] +:logaccept-77 - [0:0] :logaccept-8 - [0:0] :logaccept-9 - [0:0] :logaccept-final-0 - [0:0] @@ -1405,6 +1596,48 @@ :logdrop-98 - [0:0] :logdrop-99 - [0:0] :logpass-0 - [0:0] +:logpass-1 - [0:0] +:logpass-10 - [0:0] +:logpass-11 - [0:0] +:logpass-12 - [0:0] +:logpass-13 - [0:0] +:logpass-14 - [0:0] +:logpass-15 - [0:0] +:logpass-16 - [0:0] +:logpass-17 - [0:0] +:logpass-18 - [0:0] +:logpass-19 - [0:0] +:logpass-2 - [0:0] +:logpass-20 - [0:0] +:logpass-21 - [0:0] +:logpass-22 - [0:0] +:logpass-23 - [0:0] +:logpass-24 - [0:0] +:logpass-25 - [0:0] +:logpass-26 - [0:0] +:logpass-27 - [0:0] +:logpass-28 - [0:0] +:logpass-29 - [0:0] +:logpass-3 - [0:0] +:logpass-30 - [0:0] +:logpass-31 - [0:0] +:logpass-32 - [0:0] +:logpass-33 - [0:0] +:logpass-34 - [0:0] +:logpass-35 - [0:0] +:logpass-36 - [0:0] +:logpass-37 - [0:0] +:logpass-38 - [0:0] +:logpass-39 - [0:0] +:logpass-4 - [0:0] +:logpass-40 - [0:0] +:logpass-41 - [0:0] +:logpass-42 - [0:0] +:logpass-5 - [0:0] +:logpass-6 - [0:0] +:logpass-7 - [0:0] +:logpass-8 - [0:0] +:logpass-9 - [0:0] :logreject-0 - [0:0] :logtarpit-0 - [0:0] :tarpit - [0:0] @@ -1770,6 +2003,446 @@ -A FORWARD -j limit-358 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logpass-0 +-A FORWARD -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -d 172.16.0.0/16 +-A FORWARD -d 172.16.0.0/16 -j logaccept-1 +-A FORWARD -d 172.16.0.0/16 -j logpass-1 +-A FORWARD -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -d 172.16.0.0/16 +-A FORWARD -d 172.16.2.0/16 +-A FORWARD -d 172.16.0.0/16 -j logaccept-2 +-A FORWARD -d 172.16.2.0/16 -j logaccept-2 +-A FORWARD -d 172.16.0.0/16 -j logpass-2 +-A FORWARD -d 172.16.2.0/16 -j logpass-2 +-A FORWARD -s 10.0.0.1 -j ACCEPT +-A FORWARD -s 10.0.0.1 +-A FORWARD -s 10.0.0.1 -j logaccept-3 +-A FORWARD -s 10.0.0.1 -j logpass-3 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 +-A FORWARD -s 10.0.0.1 -j ACCEPT +-A FORWARD -s 10.0.0.2 -j ACCEPT +-A FORWARD -s 10.0.0.1 +-A FORWARD -s 10.0.0.2 +-A FORWARD -s 10.0.0.1 -j logaccept-6 +-A FORWARD -s 10.0.0.2 -j logaccept-6 +-A FORWARD -s 10.0.0.1 -j logpass-6 +-A FORWARD -s 10.0.0.2 -j logpass-6 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 +-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 +-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 +-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 +-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j logaccept-9 +-A FORWARD -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-0 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-2 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-3 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-4 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-5 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-6 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-7 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-8 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-9 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-10 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-11 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-12 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-13 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-14 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 +-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-11 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-16 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-17 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-18 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-19 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-20 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-21 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-22 +-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-23 +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth0 +-A FORWARD -i eth0 -j logaccept-18 +-A FORWARD -i eth0 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -d 172.16.0.0/16 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-19 +-A FORWARD -i eth0 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -d 172.16.0.0/16 +-A FORWARD -i eth0 -d 172.16.2.0/16 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-20 +-A FORWARD -i eth0 -d 172.16.2.0/16 -j logaccept-20 +-A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-14 +-A FORWARD -i eth0 -d 172.16.2.0/16 -j logpass-14 +-A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 +-A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-21 +-A FORWARD -i eth0 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-15 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-15 +-A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 +-A FORWARD -i eth0 -s 10.0.0.2 +-A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-24 +-A FORWARD -i eth0 -s 10.0.0.2 -j logaccept-24 +-A FORWARD -i eth0 -s 10.0.0.1 -j logpass-16 +-A FORWARD -i eth0 -s 10.0.0.2 -j logpass-16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-17 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-17 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-18 +-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-18 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-18 +-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-18 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j logaccept-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-24 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-25 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-26 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-27 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-28 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-29 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-30 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-31 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-30 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-32 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-33 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-34 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-35 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-36 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-37 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-38 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-39 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-33 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-33 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-21 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-21 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-40 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-41 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-42 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-43 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-44 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-45 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-46 +-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-47 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-36 +-A FORWARD -i eth1 -s 10.0.0.0/12 -m limit --limit 1/second -j LOG +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-24 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-24 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-48 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-49 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-50 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-51 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-52 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-53 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-54 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-55 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-56 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-57 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-58 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-59 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-60 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-61 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-62 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-63 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-64 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-65 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-66 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-67 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-68 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-69 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-70 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-71 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 +-A FORWARD -i eth2 -s 10.1.0.0/12 +-A FORWARD -i eth3 -s 10.1.0.0/12 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-45 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j logaccept-45 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j logaccept-45 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-29 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j logpass-29 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j logpass-29 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-30 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-30 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-30 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-31 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-31 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-31 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-72 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-72 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-72 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-73 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-73 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-73 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-74 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-74 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-74 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-75 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-75 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-75 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-76 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-76 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-76 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-77 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-77 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-77 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-78 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-78 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-78 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-79 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-79 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-79 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-80 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-80 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-80 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-81 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-81 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-81 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-82 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-82 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-82 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-83 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-83 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-83 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-84 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-84 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-84 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-85 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-85 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-85 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-86 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-86 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-86 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-87 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-87 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-87 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-88 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-88 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-88 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-89 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-89 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-89 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-90 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-90 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-90 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-91 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-91 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-91 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-92 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-92 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-92 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-93 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-93 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-93 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-94 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-94 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-94 +-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-95 +-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-95 +-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-95 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logaccept-54 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-36 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j logpass-36 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-96 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-97 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-98 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-99 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-100 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-101 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-102 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-103 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-104 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-105 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-106 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-107 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-108 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-109 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-110 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-111 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-112 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-113 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-114 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-115 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-116 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-117 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-118 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-119 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-120 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-121 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-122 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-123 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-124 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-125 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-126 +-A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 +-A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j address-127 +-A FORWARD -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j logdrop-0 -A FORWARD @@ -2331,9 +3004,9 @@ -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-14 +-A FORWARD -j logaccept-77 -A FORWARD -j logdrop-344 --A FORWARD -j logpass-0 +-A FORWARD -j logpass-42 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD @@ -2756,6 +3429,294 @@ -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logpass-0 +-A INPUT -d 172.16.0.0/16 -j ACCEPT +-A INPUT -d 172.16.0.0/16 +-A INPUT -d 172.16.0.0/16 -j logaccept-1 +-A INPUT -d 172.16.0.0/16 -j logpass-1 +-A INPUT -d 172.16.0.0/16 -j ACCEPT +-A INPUT -d 172.16.2.0/16 -j ACCEPT +-A INPUT -d 172.16.0.0/16 +-A INPUT -d 172.16.2.0/16 +-A INPUT -d 172.16.0.0/16 -j logaccept-2 +-A INPUT -d 172.16.2.0/16 -j logaccept-2 +-A INPUT -d 172.16.0.0/16 -j logpass-2 +-A INPUT -d 172.16.2.0/16 -j logpass-2 +-A INPUT -s 10.0.0.1 -j ACCEPT +-A INPUT -s 10.0.0.1 +-A INPUT -s 10.0.0.1 -j logaccept-3 +-A INPUT -s 10.0.0.1 -j logpass-3 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 +-A INPUT -s 10.0.0.1 -j ACCEPT +-A INPUT -s 10.0.0.2 -j ACCEPT +-A INPUT -s 10.0.0.1 +-A INPUT -s 10.0.0.2 +-A INPUT -s 10.0.0.1 -j logaccept-6 +-A INPUT -s 10.0.0.2 -j logaccept-6 +-A INPUT -s 10.0.0.1 -j logpass-6 +-A INPUT -s 10.0.0.2 -j logpass-6 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 +-A INPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 +-A INPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 +-A INPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 +-A INPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 +-A INPUT -i eth0 -j ACCEPT +-A INPUT -i eth0 +-A INPUT -i eth0 -j logaccept-18 +-A INPUT -i eth0 -m limit --limit 1/second -j LOG +-A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -d 172.16.0.0/16 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-19 +-A INPUT -i eth0 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A INPUT -i eth0 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -d 172.16.0.0/16 +-A INPUT -i eth0 -d 172.16.2.0/16 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logaccept-20 +-A INPUT -i eth0 -d 172.16.2.0/16 -j logaccept-20 +-A INPUT -i eth0 -d 172.16.0.0/16 -j logpass-14 +-A INPUT -i eth0 -d 172.16.2.0/16 -j logpass-14 +-A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 +-A INPUT -i eth0 -s 10.0.0.1 -j logaccept-21 +-A INPUT -i eth0 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-15 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-15 +-A INPUT -i eth0 -s 10.0.0.1 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 +-A INPUT -i eth0 -s 10.0.0.2 +-A INPUT -i eth0 -s 10.0.0.1 -j logaccept-24 +-A INPUT -i eth0 -s 10.0.0.2 -j logaccept-24 +-A INPUT -i eth0 -s 10.0.0.1 -j logpass-16 +-A INPUT -i eth0 -s 10.0.0.2 -j logpass-16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-17 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-17 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-18 +-A INPUT -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-18 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-18 +-A INPUT -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-18 +-A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-36 +-A INPUT -i eth1 -s 10.0.0.0/12 -m limit --limit 1/second -j LOG +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-24 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-24 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-48 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-49 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-50 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-51 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-52 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-53 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-54 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-55 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-56 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-57 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-58 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-59 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-60 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-61 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-62 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-63 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-64 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-65 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-66 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-67 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-68 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-69 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-70 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-71 +-A INPUT -i eth1 -s 10.0.0.0/12 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 +-A INPUT -i eth2 -s 10.1.0.0/12 +-A INPUT -i eth3 -s 10.1.0.0/12 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logaccept-45 +-A INPUT -i eth2 -s 10.1.0.0/12 -j logaccept-45 +-A INPUT -i eth3 -s 10.1.0.0/12 -j logaccept-45 +-A INPUT -i eth1 -s 10.0.0.0/12 -j logpass-29 +-A INPUT -i eth2 -s 10.1.0.0/12 -j logpass-29 +-A INPUT -i eth3 -s 10.1.0.0/12 -j logpass-29 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-30 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-30 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-30 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A INPUT -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-31 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A INPUT -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-31 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-31 +-A INPUT -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-31 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-72 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-72 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-72 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-73 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-73 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-73 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-74 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-74 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-74 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-75 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-75 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-75 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-76 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-76 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-76 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-77 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-77 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-77 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-78 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-78 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-78 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-79 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-79 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-79 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-80 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-80 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-80 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-81 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-81 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-81 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-82 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-82 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-82 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-83 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-83 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-83 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-84 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-84 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-84 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-85 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-85 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-85 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-86 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-86 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-86 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-87 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-87 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-87 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-88 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-88 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-88 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-89 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-89 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-89 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-90 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-90 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-90 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-91 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-91 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-91 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-92 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-92 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-92 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-93 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-93 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-93 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-94 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-94 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-94 +-A INPUT -i eth1 -s 10.0.0.0/12 -j address-95 +-A INPUT -i eth2 -s 10.1.0.0/12 -j address-95 +-A INPUT -i eth3 -s 10.1.0.0/12 -j address-95 +-A INPUT -j ACCEPT -A INPUT -j ACCEPT -A INPUT -j logdrop-0 -A INPUT @@ -3317,9 +4278,9 @@ -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-14 +-A INPUT -j logaccept-77 -A INPUT -j logdrop-344 --A INPUT -j logpass-0 +-A INPUT -j logpass-42 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT @@ -3698,6 +4659,110 @@ -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -j ACCEPT +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logpass-0 +-A OUTPUT -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -d 172.16.0.0/16 +-A OUTPUT -d 172.16.0.0/16 -j logaccept-1 +-A OUTPUT -d 172.16.0.0/16 -j logpass-1 +-A OUTPUT -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -d 172.16.0.0/16 +-A OUTPUT -d 172.16.2.0/16 +-A OUTPUT -d 172.16.0.0/16 -j logaccept-2 +-A OUTPUT -d 172.16.2.0/16 -j logaccept-2 +-A OUTPUT -d 172.16.0.0/16 -j logpass-2 +-A OUTPUT -d 172.16.2.0/16 -j logpass-2 +-A OUTPUT -s 10.0.0.1 -j ACCEPT +-A OUTPUT -s 10.0.0.1 +-A OUTPUT -s 10.0.0.1 -j logaccept-3 +-A OUTPUT -s 10.0.0.1 -j logpass-3 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5 +-A OUTPUT -s 10.0.0.1 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -j ACCEPT +-A OUTPUT -s 10.0.0.1 +-A OUTPUT -s 10.0.0.2 +-A OUTPUT -s 10.0.0.1 -j logaccept-6 +-A OUTPUT -s 10.0.0.2 -j logaccept-6 +-A OUTPUT -s 10.0.0.1 -j logpass-6 +-A OUTPUT -s 10.0.0.2 -j logpass-6 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8 +-A OUTPUT -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8 +-A OUTPUT -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8 +-A OUTPUT -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j logaccept-9 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-0 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-2 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-3 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-4 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-5 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-6 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-7 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-8 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-9 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-10 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-11 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-12 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-13 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-14 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-11 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-16 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-17 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-18 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-19 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-20 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-21 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-22 +-A OUTPUT -o eth1 -d 10.0.0.0/12 -j address-23 +-A OUTPUT -j ACCEPT -A OUTPUT -j ACCEPT -A OUTPUT -j logdrop-0 -A OUTPUT @@ -4445,9 +5510,9 @@ -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-14 +-A OUTPUT -j logaccept-77 -A OUTPUT -j logdrop-344 --A OUTPUT -j logpass-0 +-A OUTPUT -j logpass-42 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT @@ -4463,6 +5528,258 @@ -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT -A OUTPUT -p icmp -j icmp-routing +-A address-0 -d 172.16.0.0/16 -j ACCEPT +-A address-1 -d 172.16.0.0/16 +-A address-10 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-13 +-A address-100 -d 172.16.0.0/16 -j ACCEPT +-A address-100 -d 172.16.2.0/16 -j ACCEPT +-A address-101 -d 172.16.0.0/16 +-A address-101 -d 172.16.2.0/16 +-A address-102 -d 172.16.0.0/16 -j logaccept-56 +-A address-102 -d 172.16.2.0/16 -j logaccept-56 +-A address-103 -d 172.16.0.0/16 -j logpass-37 +-A address-103 -d 172.16.2.0/16 -j logpass-37 +-A address-104 -s 10.0.0.1 -j ACCEPT +-A address-105 -s 10.0.0.1 +-A address-106 -s 10.0.0.1 -j logaccept-57 +-A address-107 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A address-108 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-109 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-11 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-110 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-58 +-A address-111 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-112 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-112 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-113 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-113 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-114 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-59 +-A address-114 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-59 +-A address-115 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-38 +-A address-115 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-38 +-A address-116 -s 10.0.0.1 -j ACCEPT +-A address-116 -s 10.0.0.2 -j ACCEPT +-A address-117 -s 10.0.0.1 +-A address-117 -s 10.0.0.2 +-A address-118 -s 10.0.0.1 -j logaccept-60 +-A address-118 -s 10.0.0.2 -j logaccept-60 +-A address-119 -s 10.0.0.1 -j logpass-39 +-A address-119 -s 10.0.0.2 -j logpass-39 +-A address-12 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-12 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-120 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-120 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-121 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-121 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-122 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-61 +-A address-122 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-61 +-A address-123 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-40 +-A address-123 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-40 +-A address-124 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-124 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-124 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-124 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-125 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-125 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-125 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-125 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-126 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-62 +-A address-126 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-62 +-A address-126 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-62 +-A address-126 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-62 +-A address-127 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-41 +-A address-127 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-41 +-A address-127 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-41 +-A address-127 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-41 +-A address-13 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-13 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-14 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-14 +-A address-14 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-14 +-A address-15 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-10 +-A address-15 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-10 +-A address-16 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-16 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-17 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-17 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-18 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-16 +-A address-18 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-16 +-A address-19 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-12 +-A address-19 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-12 +-A address-2 -d 172.16.0.0/16 -j logaccept-10 +-A address-20 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-20 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-20 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-20 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-21 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-21 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-21 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-21 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-22 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-17 +-A address-22 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-17 +-A address-22 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-17 +-A address-22 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-17 +-A address-23 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-13 +-A address-23 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-13 +-A address-23 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-13 +-A address-23 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-13 +-A address-24 -d 172.16.0.0/16 -j ACCEPT +-A address-25 -d 172.16.0.0/16 +-A address-26 -d 172.16.0.0/16 -j logaccept-28 +-A address-27 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-28 -d 172.16.0.0/16 -j ACCEPT +-A address-28 -d 172.16.2.0/16 -j ACCEPT +-A address-29 -d 172.16.0.0/16 +-A address-29 -d 172.16.2.0/16 +-A address-3 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-30 -d 172.16.0.0/16 -j logaccept-29 +-A address-30 -d 172.16.2.0/16 -j logaccept-29 +-A address-31 -d 172.16.0.0/16 -j logpass-19 +-A address-31 -d 172.16.2.0/16 -j logpass-19 +-A address-32 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-33 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-34 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-31 +-A address-35 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-36 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-36 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-37 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-37 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-38 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-32 +-A address-38 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-32 +-A address-39 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20 +-A address-39 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-20 +-A address-4 -d 172.16.0.0/16 -j ACCEPT +-A address-4 -d 172.16.2.0/16 -j ACCEPT +-A address-40 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-40 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-41 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-41 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-42 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-34 +-A address-42 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-34 +-A address-43 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-22 +-A address-43 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-22 +-A address-44 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-44 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-44 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-44 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-45 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-45 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-45 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-45 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-46 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-35 +-A address-46 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-35 +-A address-46 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-35 +-A address-46 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-35 +-A address-47 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23 +-A address-47 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-23 +-A address-47 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23 +-A address-47 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-23 +-A address-48 -s 10.0.0.1 -j ACCEPT +-A address-49 -s 10.0.0.1 +-A address-5 -d 172.16.0.0/16 +-A address-5 -d 172.16.2.0/16 +-A address-50 -s 10.0.0.1 -j logaccept-39 +-A address-51 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A address-52 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-53 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-54 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-40 +-A address-55 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-56 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-56 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-57 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-57 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-58 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-41 +-A address-58 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-41 +-A address-59 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-25 +-A address-59 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-25 +-A address-6 -d 172.16.0.0/16 -j logaccept-11 +-A address-6 -d 172.16.2.0/16 -j logaccept-11 +-A address-60 -s 10.0.0.1 -j ACCEPT +-A address-60 -s 10.0.0.2 -j ACCEPT +-A address-61 -s 10.0.0.1 +-A address-61 -s 10.0.0.2 +-A address-62 -s 10.0.0.1 -j logaccept-42 +-A address-62 -s 10.0.0.2 -j logaccept-42 +-A address-63 -s 10.0.0.1 -j logpass-26 +-A address-63 -s 10.0.0.2 -j logpass-26 +-A address-64 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-64 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-65 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-65 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-66 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-43 +-A address-66 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-43 +-A address-67 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-27 +-A address-67 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-27 +-A address-68 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-68 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-68 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-68 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-69 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-69 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-69 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-69 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-7 -d 172.16.0.0/16 -j logpass-9 +-A address-7 -d 172.16.2.0/16 -j logpass-9 +-A address-70 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-44 +-A address-70 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-44 +-A address-70 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-44 +-A address-70 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-44 +-A address-71 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-28 +-A address-71 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-28 +-A address-71 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-28 +-A address-71 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-28 +-A address-72 -s 10.0.0.1 -j ACCEPT +-A address-73 -s 10.0.0.1 +-A address-74 -s 10.0.0.1 -j logaccept-48 +-A address-75 -s 10.0.0.1 -m limit --limit 1/second -j LOG +-A address-76 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-77 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-78 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-49 +-A address-79 -s 10.0.0.1 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG +-A address-8 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-80 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-80 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-81 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-81 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-82 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-50 +-A address-82 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-50 +-A address-83 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-32 +-A address-83 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-32 +-A address-84 -s 10.0.0.1 -j ACCEPT +-A address-84 -s 10.0.0.2 -j ACCEPT +-A address-85 -s 10.0.0.1 +-A address-85 -s 10.0.0.2 +-A address-86 -s 10.0.0.1 -j logaccept-51 +-A address-86 -s 10.0.0.2 -j logaccept-51 +-A address-87 -s 10.0.0.1 -j logpass-33 +-A address-87 -s 10.0.0.2 -j logpass-33 +-A address-88 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-88 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-89 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-89 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-9 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-90 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-52 +-A address-90 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-52 +-A address-91 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-34 +-A address-91 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-34 +-A address-92 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT +-A address-92 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT +-A address-92 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT +-A address-92 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT +-A address-93 -s 10.0.0.1 -d 172.16.0.0/16 +-A address-93 -s 10.0.0.1 -d 172.16.2.0/16 +-A address-93 -s 10.0.0.2 -d 172.16.0.0/16 +-A address-93 -s 10.0.0.2 -d 172.16.2.0/16 +-A address-94 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-53 +-A address-94 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-53 +-A address-94 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-53 +-A address-94 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-53 +-A address-95 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-35 +-A address-95 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-35 +-A address-95 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-35 +-A address-95 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-35 +-A address-96 -d 172.16.0.0/16 -j ACCEPT +-A address-97 -d 172.16.0.0/16 +-A address-98 -d 172.16.0.0/16 -j logaccept-55 +-A address-99 -d 172.16.0.0/16 -m limit --limit 1/second -j LOG -A icmp-routing -p icmp --icmp-type 3 -j ACCEPT -A icmp-routing -p icmp --icmp-type 11 -j ACCEPT -A icmp-routing -p icmp --icmp-type 12 -j ACCEPT @@ -4571,7 +5888,7 @@ -A limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1047 -j RETURN -A limit-1047 -m limit --limit 1/second -j LOG -A limit-1047 -j DROP --A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1048 -j logaccept-7 +-A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1048 -j logaccept-70 -A limit-1048 -m limit --limit 1/second -j LOG -A limit-1048 -j DROP -A limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1049 -j ACCEPT @@ -4585,7 +5902,7 @@ -A limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1051 -j RETURN -A limit-1051 -m limit --limit 1/second -j LOG -A limit-1051 -j DROP --A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1052 -j logaccept-8 +-A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1052 -j logaccept-71 -A limit-1052 -m limit --limit 1/second -j LOG -A limit-1052 -j DROP -A limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1053 -j ACCEPT @@ -4595,7 +5912,7 @@ -A limit-1054 -j DROP -A limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1055 -j RETURN -A limit-1055 -j DROP --A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1056 -j logaccept-9 +-A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1056 -j logaccept-72 -A limit-1056 -j DROP -A limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1057 -j ACCEPT -A limit-1057 -j DROP @@ -4605,7 +5922,7 @@ -A limit-1059 -j DROP -A limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT --A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1060 -j logaccept-10 +-A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1060 -j logaccept-73 -A limit-1060 -j DROP -A limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1061 -j ACCEPT -A limit-1061 -j DROP @@ -4615,7 +5932,7 @@ -A limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1063 -j RETURN -A limit-1063 -m limit --limit 1/second -j LOG -A limit-1063 -j DROP --A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1064 -j logaccept-11 +-A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1064 -j logaccept-74 -A limit-1064 -m limit --limit 1/second -j LOG -A limit-1064 -j DROP -A limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1065 -j ACCEPT @@ -4625,7 +5942,7 @@ -A limit-1066 -j DROP -A limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1067 -j RETURN -A limit-1067 -j DROP --A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1068 -j logaccept-12 +-A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1068 -j logaccept-75 -A limit-1068 -j DROP -A limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1069 -j ACCEPT -A limit-1069 -j DROP @@ -4635,7 +5952,7 @@ -A limit-1070 -j DROP -A limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1071 -j RETURN -A limit-1071 -j DROP --A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1072 -j logaccept-13 +-A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1072 -j logaccept-76 -A limit-1072 -j DROP -A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1073 -j ACCEPT -A limit-1073 -j DROP @@ -5107,7 +6424,7 @@ -A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-331 -j RETURN -A limit-331 -m limit --limit 1/second -j LOG -A limit-331 -j DROP --A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-0 +-A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-63 -A limit-332 -m limit --limit 1/second -j LOG -A limit-332 -j DROP -A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-333 -j ACCEPT @@ -5119,7 +6436,7 @@ -A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-335 -j RETURN -A limit-335 -m limit --limit 1/second -j LOG -A limit-335 -j DROP --A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-1 +-A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-64 -A limit-336 -m limit --limit 1/second -j LOG -A limit-336 -j DROP -A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-337 -j ACCEPT @@ -5131,7 +6448,7 @@ -A limit-339 -j DROP -A limit-34 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 -A limit-34 -j ACCEPT --A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-2 +-A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-65 -A limit-340 -j DROP -A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-341 -j ACCEPT -A limit-341 -j DROP @@ -5139,7 +6456,7 @@ -A limit-342 -j DROP -A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-343 -j RETURN -A limit-343 -j DROP --A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-3 +-A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-66 -A limit-344 -j DROP -A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-345 -j ACCEPT -A limit-345 -j DROP @@ -5149,7 +6466,7 @@ -A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-347 -j RETURN -A limit-347 -m limit --limit 1/second -j LOG -A limit-347 -j DROP --A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-4 +-A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-67 -A limit-348 -m limit --limit 1/second -j LOG -A limit-348 -j DROP -A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-349 -j ACCEPT @@ -5159,7 +6476,7 @@ -A limit-350 -j DROP -A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-351 -j RETURN -A limit-351 -j DROP --A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-5 +-A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-68 -A limit-352 -j DROP -A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-353 -j ACCEPT -A limit-353 -j DROP @@ -5167,7 +6484,7 @@ -A limit-354 -j DROP -A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-355 -j RETURN -A limit-355 -j DROP --A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-6 +-A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-69 -A limit-356 -j DROP -A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-357 -j ACCEPT -A limit-357 -j DROP @@ -6462,18 +7779,144 @@ -A logaccept-13 -j ACCEPT -A logaccept-14 -m limit --limit 1/second -j LOG -A logaccept-14 -j ACCEPT +-A logaccept-15 -m limit --limit 1/second -j LOG +-A logaccept-15 -j ACCEPT +-A logaccept-16 -m limit --limit 1/second -j LOG +-A logaccept-16 -j ACCEPT +-A logaccept-17 -m limit --limit 1/second -j LOG +-A logaccept-17 -j ACCEPT +-A logaccept-18 -m limit --limit 1/second -j LOG +-A logaccept-18 -j ACCEPT +-A logaccept-19 -m limit --limit 1/second -j LOG +-A logaccept-19 -j ACCEPT -A logaccept-2 -m limit --limit 1/second -j LOG -A logaccept-2 -j ACCEPT +-A logaccept-20 -m limit --limit 1/second -j LOG +-A logaccept-20 -j ACCEPT +-A logaccept-21 -m limit --limit 1/second -j LOG +-A logaccept-21 -j ACCEPT +-A logaccept-22 -m limit --limit 1/second -j LOG +-A logaccept-22 -j ACCEPT +-A logaccept-23 -m limit --limit 1/second -j LOG +-A logaccept-23 -j ACCEPT +-A logaccept-24 -m limit --limit 1/second -j LOG +-A logaccept-24 -j ACCEPT +-A logaccept-25 -m limit --limit 1/second -j LOG +-A logaccept-25 -j ACCEPT +-A logaccept-26 -m limit --limit 1/second -j LOG +-A logaccept-26 -j ACCEPT +-A logaccept-27 -m limit --limit 1/second -j LOG +-A logaccept-27 -j ACCEPT +-A logaccept-28 -m limit --limit 1/second -j LOG +-A logaccept-28 -j ACCEPT +-A logaccept-29 -m limit --limit 1/second -j LOG +-A logaccept-29 -j ACCEPT -A logaccept-3 -m limit --limit 1/second -j LOG -A logaccept-3 -j ACCEPT +-A logaccept-30 -m limit --limit 1/second -j LOG +-A logaccept-30 -j ACCEPT +-A logaccept-31 -m limit --limit 1/second -j LOG +-A logaccept-31 -j ACCEPT +-A logaccept-32 -m limit --limit 1/second -j LOG +-A logaccept-32 -j ACCEPT +-A logaccept-33 -m limit --limit 1/second -j LOG +-A logaccept-33 -j ACCEPT +-A logaccept-34 -m limit --limit 1/second -j LOG +-A logaccept-34 -j ACCEPT +-A logaccept-35 -m limit --limit 1/second -j LOG +-A logaccept-35 -j ACCEPT +-A logaccept-36 -m limit --limit 1/second -j LOG +-A logaccept-36 -j ACCEPT +-A logaccept-37 -m limit --limit 1/second -j LOG +-A logaccept-37 -j ACCEPT +-A logaccept-38 -m limit --limit 1/second -j LOG +-A logaccept-38 -j ACCEPT +-A logaccept-39 -m limit --limit 1/second -j LOG +-A logaccept-39 -j ACCEPT -A logaccept-4 -m limit --limit 1/second -j LOG -A logaccept-4 -j ACCEPT +-A logaccept-40 -m limit --limit 1/second -j LOG +-A logaccept-40 -j ACCEPT +-A logaccept-41 -m limit --limit 1/second -j LOG +-A logaccept-41 -j ACCEPT +-A logaccept-42 -m limit --limit 1/second -j LOG +-A logaccept-42 -j ACCEPT +-A logaccept-43 -m limit --limit 1/second -j LOG +-A logaccept-43 -j ACCEPT +-A logaccept-44 -m limit --limit 1/second -j LOG +-A logaccept-44 -j ACCEPT +-A logaccept-45 -m limit --limit 1/second -j LOG +-A logaccept-45 -j ACCEPT +-A logaccept-46 -m limit --limit 1/second -j LOG +-A logaccept-46 -j ACCEPT +-A logaccept-47 -m limit --limit 1/second -j LOG +-A logaccept-47 -j ACCEPT +-A logaccept-48 -m limit --limit 1/second -j LOG +-A logaccept-48 -j ACCEPT +-A logaccept-49 -m limit --limit 1/second -j LOG +-A logaccept-49 -j ACCEPT -A logaccept-5 -m limit --limit 1/second -j LOG -A logaccept-5 -j ACCEPT +-A logaccept-50 -m limit --limit 1/second -j LOG +-A logaccept-50 -j ACCEPT +-A logaccept-51 -m limit --limit 1/second -j LOG +-A logaccept-51 -j ACCEPT +-A logaccept-52 -m limit --limit 1/second -j LOG +-A logaccept-52 -j ACCEPT +-A logaccept-53 -m limit --limit 1/second -j LOG +-A logaccept-53 -j ACCEPT +-A logaccept-54 -m limit --limit 1/second -j LOG +-A logaccept-54 -j ACCEPT +-A logaccept-55 -m limit --limit 1/second -j LOG +-A logaccept-55 -j ACCEPT +-A logaccept-56 -m limit --limit 1/second -j LOG +-A logaccept-56 -j ACCEPT +-A logaccept-57 -m limit --limit 1/second -j LOG +-A logaccept-57 -j ACCEPT +-A logaccept-58 -m limit --limit 1/second -j LOG +-A logaccept-58 -j ACCEPT +-A logaccept-59 -m limit --limit 1/second -j LOG +-A logaccept-59 -j ACCEPT -A logaccept-6 -m limit --limit 1/second -j LOG -A logaccept-6 -j ACCEPT +-A logaccept-60 -m limit --limit 1/second -j LOG +-A logaccept-60 -j ACCEPT +-A logaccept-61 -m limit --limit 1/second -j LOG +-A logaccept-61 -j ACCEPT +-A logaccept-62 -m limit --limit 1/second -j LOG +-A logaccept-62 -j ACCEPT +-A logaccept-63 -m limit --limit 1/second -j LOG +-A logaccept-63 -j ACCEPT +-A logaccept-64 -m limit --limit 1/second -j LOG +-A logaccept-64 -j ACCEPT +-A logaccept-65 -m limit --limit 1/second -j LOG +-A logaccept-65 -j ACCEPT +-A logaccept-66 -m limit --limit 1/second -j LOG +-A logaccept-66 -j ACCEPT +-A logaccept-67 -m limit --limit 1/second -j LOG +-A logaccept-67 -j ACCEPT +-A logaccept-68 -m limit --limit 1/second -j LOG +-A logaccept-68 -j ACCEPT +-A logaccept-69 -m limit --limit 1/second -j LOG +-A logaccept-69 -j ACCEPT -A logaccept-7 -m limit --limit 1/second -j LOG -A logaccept-7 -j ACCEPT +-A logaccept-70 -m limit --limit 1/second -j LOG +-A logaccept-70 -j ACCEPT +-A logaccept-71 -m limit --limit 1/second -j LOG +-A logaccept-71 -j ACCEPT +-A logaccept-72 -m limit --limit 1/second -j LOG +-A logaccept-72 -j ACCEPT +-A logaccept-73 -m limit --limit 1/second -j LOG +-A logaccept-73 -j ACCEPT +-A logaccept-74 -m limit --limit 1/second -j LOG +-A logaccept-74 -j ACCEPT +-A logaccept-75 -m limit --limit 1/second -j LOG +-A logaccept-75 -j ACCEPT +-A logaccept-76 -m limit --limit 1/second -j LOG +-A logaccept-76 -j ACCEPT +-A logaccept-77 -m limit --limit 1/second -j LOG +-A logaccept-77 -j ACCEPT -A logaccept-8 -m limit --limit 1/second -j LOG -A logaccept-8 -j ACCEPT -A logaccept-9 -m limit --limit 1/second -j LOG @@ -7293,6 +8736,48 @@ -A logdrop-99 -m limit --limit 1/second -j LOG -A logdrop-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-1 -m limit --limit 1/second -j LOG +-A logpass-10 -m limit --limit 1/second -j LOG +-A logpass-11 -m limit --limit 1/second -j LOG +-A logpass-12 -m limit --limit 1/second -j LOG +-A logpass-13 -m limit --limit 1/second -j LOG +-A logpass-14 -m limit --limit 1/second -j LOG +-A logpass-15 -m limit --limit 1/second -j LOG +-A logpass-16 -m limit --limit 1/second -j LOG +-A logpass-17 -m limit --limit 1/second -j LOG +-A logpass-18 -m limit --limit 1/second -j LOG +-A logpass-19 -m limit --limit 1/second -j LOG +-A logpass-2 -m limit --limit 1/second -j LOG +-A logpass-20 -m limit --limit 1/second -j LOG +-A logpass-21 -m limit --limit 1/second -j LOG +-A logpass-22 -m limit --limit 1/second -j LOG +-A logpass-23 -m limit --limit 1/second -j LOG +-A logpass-24 -m limit --limit 1/second -j LOG +-A logpass-25 -m limit --limit 1/second -j LOG +-A logpass-26 -m limit --limit 1/second -j LOG +-A logpass-27 -m limit --limit 1/second -j LOG +-A logpass-28 -m limit --limit 1/second -j LOG +-A logpass-29 -m limit --limit 1/second -j LOG +-A logpass-3 -m limit --limit 1/second -j LOG +-A logpass-30 -m limit --limit 1/second -j LOG +-A logpass-31 -m limit --limit 1/second -j LOG +-A logpass-32 -m limit --limit 1/second -j LOG +-A logpass-33 -m limit --limit 1/second -j LOG +-A logpass-34 -m limit --limit 1/second -j LOG +-A logpass-35 -m limit --limit 1/second -j LOG +-A logpass-36 -m limit --limit 1/second -j LOG +-A logpass-37 -m limit --limit 1/second -j LOG +-A logpass-38 -m limit --limit 1/second -j LOG +-A logpass-39 -m limit --limit 1/second -j LOG +-A logpass-4 -m limit --limit 1/second -j LOG +-A logpass-40 -m limit --limit 1/second -j LOG +-A logpass-41 -m limit --limit 1/second -j LOG +-A logpass-42 -m limit --limit 1/second -j LOG +-A logpass-5 -m limit --limit 1/second -j LOG +-A logpass-6 -m limit --limit 1/second -j LOG +-A logpass-7 -m limit --limit 1/second -j LOG +-A logpass-8 -m limit --limit 1/second -j LOG +-A logpass-9 -m limit --limit 1/second -j LOG -A logreject-0 -m limit --limit 1/second -j LOG -A logreject-0 -j REJECT -A logtarpit-0 -m limit --limit 1/second -j LOG diff --git a/test/output/rules6-save b/test/output/rules6-save index 5fe72a7..bb4268b 100644 --- a/test/output/rules6-save +++ b/test/output/rules6-save @@ -983,19 +983,25 @@ :limit-998 - [0:0] :limit-999 - [0:0] :logaccept-0 - [0:0] -:logaccept-1 - [0:0] -:logaccept-10 - [0:0] -:logaccept-11 - [0:0] -:logaccept-12 - [0:0] -:logaccept-13 - [0:0] -:logaccept-14 - [0:0] -:logaccept-2 - [0:0] -:logaccept-3 - [0:0] -:logaccept-4 - [0:0] -:logaccept-5 - [0:0] -:logaccept-6 - [0:0] -:logaccept-7 - [0:0] -:logaccept-8 - [0:0] +:logaccept-18 - [0:0] +:logaccept-27 - [0:0] +:logaccept-36 - [0:0] +:logaccept-45 - [0:0] +:logaccept-63 - [0:0] +:logaccept-64 - [0:0] +:logaccept-65 - [0:0] +:logaccept-66 - [0:0] +:logaccept-67 - [0:0] +:logaccept-68 - [0:0] +:logaccept-69 - [0:0] +:logaccept-70 - [0:0] +:logaccept-71 - [0:0] +:logaccept-72 - [0:0] +:logaccept-73 - [0:0] +:logaccept-74 - [0:0] +:logaccept-75 - [0:0] +:logaccept-76 - [0:0] +:logaccept-77 - [0:0] :logaccept-9 - [0:0] :logaccept-final-0 - [0:0] :logaccept-final-1 - [0:0] @@ -1405,6 +1411,8 @@ :logdrop-98 - [0:0] :logdrop-99 - [0:0] :logpass-0 - [0:0] +:logpass-29 - [0:0] +:logpass-42 - [0:0] :logreject-0 - [0:0] :logtarpit-0 - [0:0] :tarpit - [0:0] @@ -1770,6 +1778,30 @@ -A FORWARD -j limit-358 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT +-A FORWARD +-A FORWARD -j logaccept-0 +-A FORWARD -j logpass-0 +-A FORWARD -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -o eth1 -d fc00::/7 +-A FORWARD -o eth1 -d fc00::/7 -j logaccept-9 +-A FORWARD -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -j ACCEPT +-A FORWARD -i eth0 +-A FORWARD -i eth0 -j logaccept-18 +-A FORWARD -i eth0 -m limit --limit 1/second -j LOG +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT +-A FORWARD -i eth0 -o eth1 -d fc00::/7 +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -j logaccept-27 +-A FORWARD -i eth0 -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG +-A FORWARD -i eth1 -s fc00::/7 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 +-A FORWARD -i eth1 -s fc00::/7 -j logaccept-36 +-A FORWARD -i eth1 -s fc00::/7 -m limit --limit 1/second -j LOG +-A FORWARD -i eth1 -s fc00::/7 -j ACCEPT +-A FORWARD -i eth1 -s fc00::/7 +-A FORWARD -i eth1 -s fc00::/7 -j logaccept-45 +-A FORWARD -i eth1 -s fc00::/7 -j logpass-29 +-A FORWARD -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j logdrop-0 -A FORWARD @@ -2331,9 +2363,9 @@ -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD --A FORWARD -j logaccept-14 +-A FORWARD -j logaccept-77 -A FORWARD -j logdrop-344 --A FORWARD -j logpass-0 +-A FORWARD -j logpass-42 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD @@ -2726,6 +2758,22 @@ -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT +-A INPUT +-A INPUT -j logaccept-0 +-A INPUT -j logpass-0 +-A INPUT -i eth0 -j ACCEPT +-A INPUT -i eth0 +-A INPUT -i eth0 -j logaccept-18 +-A INPUT -i eth0 -m limit --limit 1/second -j LOG +-A INPUT -i eth1 -s fc00::/7 -j ACCEPT +-A INPUT -i eth1 -s fc00::/7 +-A INPUT -i eth1 -s fc00::/7 -j logaccept-36 +-A INPUT -i eth1 -s fc00::/7 -m limit --limit 1/second -j LOG +-A INPUT -i eth1 -s fc00::/7 -j ACCEPT +-A INPUT -i eth1 -s fc00::/7 +-A INPUT -i eth1 -s fc00::/7 -j logaccept-45 +-A INPUT -i eth1 -s fc00::/7 -j logpass-29 +-A INPUT -j ACCEPT -A INPUT -j ACCEPT -A INPUT -j logdrop-0 -A INPUT @@ -3287,9 +3335,9 @@ -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT --A INPUT -j logaccept-14 +-A INPUT -j logaccept-77 -A INPUT -j logdrop-344 --A INPUT -j logpass-0 +-A INPUT -j logpass-42 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT @@ -3662,6 +3710,14 @@ -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -j ACCEPT +-A OUTPUT +-A OUTPUT -j logaccept-0 +-A OUTPUT -j logpass-0 +-A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT +-A OUTPUT -o eth1 -d fc00::/7 +-A OUTPUT -o eth1 -d fc00::/7 -j logaccept-9 +-A OUTPUT -o eth1 -d fc00::/7 -m limit --limit 1/second -j LOG +-A OUTPUT -j ACCEPT -A OUTPUT -j ACCEPT -A OUTPUT -j logdrop-0 -A OUTPUT @@ -4409,9 +4465,9 @@ -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT --A OUTPUT -j logaccept-14 +-A OUTPUT -j logaccept-77 -A OUTPUT -j logdrop-344 --A OUTPUT -j logpass-0 +-A OUTPUT -j logpass-42 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT @@ -4530,7 +4586,7 @@ -A limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1047 -j RETURN -A limit-1047 -m limit --limit 1/second -j LOG -A limit-1047 -j DROP --A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1048 -j logaccept-7 +-A limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1048 -j logaccept-70 -A limit-1048 -m limit --limit 1/second -j LOG -A limit-1048 -j DROP -A limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1049 -j ACCEPT @@ -4544,7 +4600,7 @@ -A limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1051 -j RETURN -A limit-1051 -m limit --limit 1/second -j LOG -A limit-1051 -j DROP --A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1052 -j logaccept-8 +-A limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1052 -j logaccept-71 -A limit-1052 -m limit --limit 1/second -j LOG -A limit-1052 -j DROP -A limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1053 -j ACCEPT @@ -4554,7 +4610,7 @@ -A limit-1054 -j DROP -A limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1055 -j RETURN -A limit-1055 -j DROP --A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1056 -j logaccept-9 +-A limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1056 -j logaccept-72 -A limit-1056 -j DROP -A limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1057 -j ACCEPT -A limit-1057 -j DROP @@ -4564,7 +4620,7 @@ -A limit-1059 -j DROP -A limit-106 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT --A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1060 -j logaccept-10 +-A limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1060 -j logaccept-73 -A limit-1060 -j DROP -A limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1061 -j ACCEPT -A limit-1061 -j DROP @@ -4574,7 +4630,7 @@ -A limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1063 -j RETURN -A limit-1063 -m limit --limit 1/second -j LOG -A limit-1063 -j DROP --A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1064 -j logaccept-11 +-A limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1064 -j logaccept-74 -A limit-1064 -m limit --limit 1/second -j LOG -A limit-1064 -j DROP -A limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1065 -j ACCEPT @@ -4584,7 +4640,7 @@ -A limit-1066 -j DROP -A limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1067 -j RETURN -A limit-1067 -j DROP --A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1068 -j logaccept-12 +-A limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1068 -j logaccept-75 -A limit-1068 -j DROP -A limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1069 -j ACCEPT -A limit-1069 -j DROP @@ -4594,7 +4650,7 @@ -A limit-1070 -j DROP -A limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1071 -j RETURN -A limit-1071 -j DROP --A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1072 -j logaccept-13 +-A limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1072 -j logaccept-76 -A limit-1072 -j DROP -A limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1073 -j ACCEPT -A limit-1073 -j DROP @@ -5066,7 +5122,7 @@ -A limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-331 -j RETURN -A limit-331 -m limit --limit 1/second -j LOG -A limit-331 -j DROP --A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-0 +-A limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-63 -A limit-332 -m limit --limit 1/second -j LOG -A limit-332 -j DROP -A limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-333 -j ACCEPT @@ -5078,7 +5134,7 @@ -A limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-335 -j RETURN -A limit-335 -m limit --limit 1/second -j LOG -A limit-335 -j DROP --A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-1 +-A limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-64 -A limit-336 -m limit --limit 1/second -j LOG -A limit-336 -j DROP -A limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-337 -j ACCEPT @@ -5090,7 +5146,7 @@ -A limit-339 -j DROP -A limit-34 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 -A limit-34 -j ACCEPT --A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-2 +-A limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-65 -A limit-340 -j DROP -A limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-341 -j ACCEPT -A limit-341 -j DROP @@ -5098,7 +5154,7 @@ -A limit-342 -j DROP -A limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-343 -j RETURN -A limit-343 -j DROP --A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-3 +-A limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-66 -A limit-344 -j DROP -A limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-345 -j ACCEPT -A limit-345 -j DROP @@ -5108,7 +5164,7 @@ -A limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-347 -j RETURN -A limit-347 -m limit --limit 1/second -j LOG -A limit-347 -j DROP --A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-4 +-A limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-67 -A limit-348 -m limit --limit 1/second -j LOG -A limit-348 -j DROP -A limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-349 -j ACCEPT @@ -5118,7 +5174,7 @@ -A limit-350 -j DROP -A limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-351 -j RETURN -A limit-351 -j DROP --A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-5 +-A limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-68 -A limit-352 -j DROP -A limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-353 -j ACCEPT -A limit-353 -j DROP @@ -5126,7 +5182,7 @@ -A limit-354 -j DROP -A limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-355 -j RETURN -A limit-355 -j DROP --A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-6 +-A limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-69 -A limit-356 -j DROP -A limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-357 -j ACCEPT -A limit-357 -j DROP @@ -6409,32 +6465,44 @@ -A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT --A logaccept-1 -m limit --limit 1/second -j LOG --A logaccept-1 -j ACCEPT --A logaccept-10 -m limit --limit 1/second -j LOG --A logaccept-10 -j ACCEPT --A logaccept-11 -m limit --limit 1/second -j LOG --A logaccept-11 -j ACCEPT --A logaccept-12 -m limit --limit 1/second -j LOG --A logaccept-12 -j ACCEPT --A logaccept-13 -m limit --limit 1/second -j LOG --A logaccept-13 -j ACCEPT --A logaccept-14 -m limit --limit 1/second -j LOG --A logaccept-14 -j ACCEPT --A logaccept-2 -m limit --limit 1/second -j LOG --A logaccept-2 -j ACCEPT --A logaccept-3 -m limit --limit 1/second -j LOG --A logaccept-3 -j ACCEPT --A logaccept-4 -m limit --limit 1/second -j LOG --A logaccept-4 -j ACCEPT --A logaccept-5 -m limit --limit 1/second -j LOG --A logaccept-5 -j ACCEPT --A logaccept-6 -m limit --limit 1/second -j LOG --A logaccept-6 -j ACCEPT --A logaccept-7 -m limit --limit 1/second -j LOG --A logaccept-7 -j ACCEPT --A logaccept-8 -m limit --limit 1/second -j LOG --A logaccept-8 -j ACCEPT +-A logaccept-18 -m limit --limit 1/second -j LOG +-A logaccept-18 -j ACCEPT +-A logaccept-27 -m limit --limit 1/second -j LOG +-A logaccept-27 -j ACCEPT +-A logaccept-36 -m limit --limit 1/second -j LOG +-A logaccept-36 -j ACCEPT +-A logaccept-45 -m limit --limit 1/second -j LOG +-A logaccept-45 -j ACCEPT +-A logaccept-63 -m limit --limit 1/second -j LOG +-A logaccept-63 -j ACCEPT +-A logaccept-64 -m limit --limit 1/second -j LOG +-A logaccept-64 -j ACCEPT +-A logaccept-65 -m limit --limit 1/second -j LOG +-A logaccept-65 -j ACCEPT +-A logaccept-66 -m limit --limit 1/second -j LOG +-A logaccept-66 -j ACCEPT +-A logaccept-67 -m limit --limit 1/second -j LOG +-A logaccept-67 -j ACCEPT +-A logaccept-68 -m limit --limit 1/second -j LOG +-A logaccept-68 -j ACCEPT +-A logaccept-69 -m limit --limit 1/second -j LOG +-A logaccept-69 -j ACCEPT +-A logaccept-70 -m limit --limit 1/second -j LOG +-A logaccept-70 -j ACCEPT +-A logaccept-71 -m limit --limit 1/second -j LOG +-A logaccept-71 -j ACCEPT +-A logaccept-72 -m limit --limit 1/second -j LOG +-A logaccept-72 -j ACCEPT +-A logaccept-73 -m limit --limit 1/second -j LOG +-A logaccept-73 -j ACCEPT +-A logaccept-74 -m limit --limit 1/second -j LOG +-A logaccept-74 -j ACCEPT +-A logaccept-75 -m limit --limit 1/second -j LOG +-A logaccept-75 -j ACCEPT +-A logaccept-76 -m limit --limit 1/second -j LOG +-A logaccept-76 -j ACCEPT +-A logaccept-77 -m limit --limit 1/second -j LOG +-A logaccept-77 -j ACCEPT -A logaccept-9 -m limit --limit 1/second -j LOG -A logaccept-9 -j ACCEPT -A logaccept-final-0 -m limit --limit 1/second -j LOG @@ -7252,6 +7320,8 @@ -A logdrop-99 -m limit --limit 1/second -j LOG -A logdrop-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG +-A logpass-29 -m limit --limit 1/second -j LOG +-A logpass-42 -m limit --limit 1/second -j LOG -A logreject-0 -m limit --limit 1/second -j LOG -A logreject-0 -j REJECT -A logtarpit-0 -m limit --limit 1/second -j LOG |