diff options
Diffstat (limited to 'test/output/rules6-save')
| -rw-r--r-- | test/output/rules6-save | 1901 |
1 files changed, 1321 insertions, 580 deletions
diff --git a/test/output/rules6-save b/test/output/rules6-save index d79f6a9..fa1677a 100644 --- a/test/output/rules6-save +++ b/test/output/rules6-save @@ -85,9 +85,11 @@ :limit-169 - [0:0] :limit-17 - [0:0] :limit-170 - [0:0] +:limit-171 - [0:0] :limit-172 - [0:0] :limit-173 - [0:0] :limit-174 - [0:0] +:limit-175 - [0:0] :limit-176 - [0:0] :limit-177 - [0:0] :limit-178 - [0:0] @@ -102,9 +104,11 @@ :limit-186 - [0:0] :limit-187 - [0:0] :limit-188 - [0:0] +:limit-189 - [0:0] :limit-190 - [0:0] :limit-191 - [0:0] :limit-192 - [0:0] +:limit-193 - [0:0] :limit-194 - [0:0] :limit-195 - [0:0] :limit-196 - [0:0] @@ -120,10 +124,12 @@ :limit-204 - [0:0] :limit-205 - [0:0] :limit-206 - [0:0] +:limit-207 - [0:0] :limit-208 - [0:0] :limit-209 - [0:0] :limit-21 - [0:0] :limit-210 - [0:0] +:limit-211 - [0:0] :limit-212 - [0:0] :limit-213 - [0:0] :limit-214 - [0:0] @@ -141,24 +147,120 @@ :limit-225 - [0:0] :limit-226 - [0:0] :limit-227 - [0:0] +:limit-228 - [0:0] +:limit-229 - [0:0] +:limit-230 - [0:0] +:limit-231 - [0:0] +:limit-232 - [0:0] +:limit-233 - [0:0] +:limit-234 - [0:0] +:limit-235 - [0:0] +:limit-236 - [0:0] +:limit-237 - [0:0] +:limit-238 - [0:0] +:limit-239 - [0:0] :limit-24 - [0:0] +:limit-240 - [0:0] +:limit-241 - [0:0] +:limit-242 - [0:0] +:limit-244 - [0:0] +:limit-245 - [0:0] +:limit-246 - [0:0] +:limit-248 - [0:0] +:limit-249 - [0:0] :limit-25 - [0:0] +:limit-250 - [0:0] +:limit-251 - [0:0] +:limit-252 - [0:0] +:limit-253 - [0:0] +:limit-254 - [0:0] +:limit-256 - [0:0] +:limit-257 - [0:0] +:limit-258 - [0:0] :limit-26 - [0:0] +:limit-260 - [0:0] +:limit-261 - [0:0] +:limit-262 - [0:0] +:limit-263 - [0:0] +:limit-264 - [0:0] +:limit-265 - [0:0] +:limit-266 - [0:0] +:limit-267 - [0:0] +:limit-268 - [0:0] +:limit-269 - [0:0] :limit-27 - [0:0] +:limit-270 - [0:0] +:limit-271 - [0:0] +:limit-272 - [0:0] +:limit-274 - [0:0] +:limit-275 - [0:0] +:limit-276 - [0:0] +:limit-278 - [0:0] +:limit-279 - [0:0] :limit-28 - [0:0] +:limit-280 - [0:0] +:limit-281 - [0:0] +:limit-282 - [0:0] +:limit-283 - [0:0] +:limit-284 - [0:0] +:limit-286 - [0:0] +:limit-287 - [0:0] +:limit-288 - [0:0] :limit-29 - [0:0] +:limit-290 - [0:0] +:limit-291 - [0:0] +:limit-292 - [0:0] +:limit-293 - [0:0] +:limit-294 - [0:0] +:limit-295 - [0:0] +:limit-296 - [0:0] +:limit-297 - [0:0] +:limit-298 - [0:0] +:limit-299 - [0:0] :limit-3 - [0:0] :limit-30 - [0:0] -:limit-31 - [0:0] +:limit-300 - [0:0] +:limit-301 - [0:0] +:limit-302 - [0:0] +:limit-304 - [0:0] +:limit-305 - [0:0] +:limit-306 - [0:0] +:limit-308 - [0:0] +:limit-309 - [0:0] +:limit-310 - [0:0] +:limit-311 - [0:0] +:limit-312 - [0:0] +:limit-313 - [0:0] +:limit-314 - [0:0] +:limit-316 - [0:0] +:limit-317 - [0:0] +:limit-318 - [0:0] :limit-32 - [0:0] +:limit-320 - [0:0] +:limit-321 - [0:0] +:limit-322 - [0:0] +:limit-323 - [0:0] +:limit-324 - [0:0] +:limit-325 - [0:0] +:limit-326 - [0:0] +:limit-327 - [0:0] +:limit-328 - [0:0] +:limit-329 - [0:0] :limit-33 - [0:0] +:limit-330 - [0:0] +:limit-331 - [0:0] +:limit-332 - [0:0] +:limit-333 - [0:0] +:limit-334 - [0:0] +:limit-335 - [0:0] :limit-34 - [0:0] -:limit-35 - [0:0] :limit-36 - [0:0] +:limit-37 - [0:0] :limit-38 - [0:0] :limit-39 - [0:0] :limit-4 - [0:0] :limit-40 - [0:0] +:limit-41 - [0:0] :limit-42 - [0:0] :limit-43 - [0:0] :limit-44 - [0:0] @@ -166,23 +268,21 @@ :limit-46 - [0:0] :limit-47 - [0:0] :limit-48 - [0:0] -:limit-49 - [0:0] :limit-5 - [0:0] :limit-50 - [0:0] :limit-51 - [0:0] :limit-52 - [0:0] -:limit-53 - [0:0] :limit-54 - [0:0] +:limit-55 - [0:0] :limit-56 - [0:0] :limit-57 - [0:0] :limit-58 - [0:0] +:limit-59 - [0:0] :limit-6 - [0:0] :limit-60 - [0:0] -:limit-61 - [0:0] :limit-62 - [0:0] :limit-63 - [0:0] :limit-64 - [0:0] -:limit-65 - [0:0] :limit-66 - [0:0] :limit-67 - [0:0] :limit-68 - [0:0] @@ -197,12 +297,10 @@ :limit-76 - [0:0] :limit-77 - [0:0] :limit-78 - [0:0] -:limit-79 - [0:0] :limit-8 - [0:0] :limit-80 - [0:0] :limit-81 - [0:0] :limit-82 - [0:0] -:limit-83 - [0:0] :limit-84 - [0:0] :limit-85 - [0:0] :limit-86 - [0:0] @@ -211,11 +309,9 @@ :limit-89 - [0:0] :limit-9 - [0:0] :limit-90 - [0:0] -:limit-91 - [0:0] :limit-92 - [0:0] :limit-93 - [0:0] :limit-94 - [0:0] -:limit-95 - [0:0] :limit-96 - [0:0] :limit-97 - [0:0] :limit-98 - [0:0] @@ -235,6 +331,12 @@ :logaccept-final-11 - [0:0] :logaccept-final-12 - [0:0] :logaccept-final-13 - [0:0] +:logaccept-final-14 - [0:0] +:logaccept-final-15 - [0:0] +:logaccept-final-16 - [0:0] +:logaccept-final-17 - [0:0] +:logaccept-final-18 - [0:0] +:logaccept-final-19 - [0:0] :logaccept-final-2 - [0:0] :logaccept-final-3 - [0:0] :logaccept-final-4 - [0:0] @@ -246,7 +348,16 @@ :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-10 - [0:0] +:logdrop-100 - [0:0] +:logdrop-101 - [0:0] +:logdrop-102 - [0:0] +:logdrop-103 - [0:0] +:logdrop-105 - [0:0] +:logdrop-106 - [0:0] +:logdrop-107 - [0:0] +:logdrop-109 - [0:0] :logdrop-11 - [0:0] +:logdrop-110 - [0:0] :logdrop-12 - [0:0] :logdrop-13 - [0:0] :logdrop-14 - [0:0] @@ -267,11 +378,9 @@ :logdrop-3 - [0:0] :logdrop-30 - [0:0] :logdrop-31 - [0:0] -:logdrop-32 - [0:0] :logdrop-33 - [0:0] :logdrop-34 - [0:0] :logdrop-35 - [0:0] -:logdrop-36 - [0:0] :logdrop-37 - [0:0] :logdrop-38 - [0:0] :logdrop-39 - [0:0] @@ -306,20 +415,117 @@ :logdrop-65 - [0:0] :logdrop-66 - [0:0] :logdrop-67 - [0:0] +:logdrop-68 - [0:0] :logdrop-69 - [0:0] :logdrop-7 - [0:0] :logdrop-70 - [0:0] :logdrop-71 - [0:0] +:logdrop-72 - [0:0] :logdrop-73 - [0:0] :logdrop-74 - [0:0] +:logdrop-75 - [0:0] +:logdrop-76 - [0:0] +:logdrop-77 - [0:0] +:logdrop-78 - [0:0] +:logdrop-79 - [0:0] :logdrop-8 - [0:0] +:logdrop-80 - [0:0] +:logdrop-81 - [0:0] +:logdrop-82 - [0:0] +:logdrop-83 - [0:0] +:logdrop-84 - [0:0] +:logdrop-85 - [0:0] +:logdrop-86 - [0:0] +:logdrop-87 - [0:0] +:logdrop-88 - [0:0] +:logdrop-89 - [0:0] :logdrop-9 - [0:0] +:logdrop-90 - [0:0] +:logdrop-91 - [0:0] +:logdrop-93 - [0:0] +:logdrop-94 - [0:0] +:logdrop-95 - [0:0] +:logdrop-97 - [0:0] +:logdrop-98 - [0:0] +:logdrop-99 - [0:0] :logpass-0 - [0:0] :logreject-0 - [0:0] :logtarpit-0 - [0:0] :tarpit - [0:0] -A FORWARD -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A FORWARD -j limit-223 +-A FORWARD -j limit-222 +-A FORWARD -j limit-221 +-A FORWARD -j limit-220 +-A FORWARD -j limit-219 +-A FORWARD -j limit-218 +-A FORWARD -j limit-217 +-A FORWARD -j limit-216 +-A FORWARD -j limit-215 +-A FORWARD -j limit-214 +-A FORWARD -j limit-213 +-A FORWARD -j limit-212 +-A FORWARD -j limit-211 +-A FORWARD -j limit-210 +-A FORWARD -j limit-209 +-A FORWARD -j limit-208 +-A FORWARD -j limit-207 +-A FORWARD -j limit-206 +-A FORWARD -j limit-205 +-A FORWARD -j limit-204 +-A FORWARD -j limit-203 +-A FORWARD -j limit-202 +-A FORWARD -j limit-201 +-A FORWARD -j limit-200 +-A FORWARD -j limit-199 +-A FORWARD -j limit-198 +-A FORWARD -j limit-197 +-A FORWARD -j limit-196 +-A FORWARD -j limit-195 +-A FORWARD -j limit-194 +-A FORWARD -j limit-193 +-A FORWARD -j limit-192 +-A FORWARD -j limit-191 +-A FORWARD -j limit-190 +-A FORWARD -j limit-189 +-A FORWARD -j limit-188 +-A FORWARD -j limit-187 +-A FORWARD -j limit-186 +-A FORWARD -j limit-185 +-A FORWARD -j limit-184 +-A FORWARD -j limit-183 +-A FORWARD -j limit-182 +-A FORWARD -j limit-181 +-A FORWARD -j limit-180 +-A FORWARD -j limit-179 +-A FORWARD -j limit-178 +-A FORWARD -j limit-177 +-A FORWARD -j limit-176 +-A FORWARD -j limit-175 +-A FORWARD -j limit-174 +-A FORWARD -j limit-173 +-A FORWARD -j limit-172 +-A FORWARD -j limit-171 +-A FORWARD -j limit-170 +-A FORWARD -j limit-169 +-A FORWARD -j limit-168 +-A FORWARD -j limit-167 +-A FORWARD -j limit-166 +-A FORWARD -j limit-165 +-A FORWARD -j limit-164 +-A FORWARD -j limit-163 +-A FORWARD -j limit-162 +-A FORWARD -j limit-161 +-A FORWARD -j limit-160 +-A FORWARD -j limit-159 +-A FORWARD -j limit-158 +-A FORWARD -j limit-157 +-A FORWARD -j limit-156 +-A FORWARD -j limit-155 +-A FORWARD -j limit-154 +-A FORWARD -j limit-153 +-A FORWARD -j limit-152 -A FORWARD -j limit-151 -A FORWARD -j limit-150 -A FORWARD -j limit-149 @@ -360,42 +566,6 @@ -A FORWARD -j limit-114 -A FORWARD -j limit-113 -A FORWARD -j limit-112 --A FORWARD -j limit-111 --A FORWARD -j limit-110 --A FORWARD -j limit-109 --A FORWARD -j limit-108 --A FORWARD -j limit-107 --A FORWARD -j limit-106 --A FORWARD -j limit-105 --A FORWARD -j limit-104 --A FORWARD -j limit-103 --A FORWARD -j limit-102 --A FORWARD -j limit-101 --A FORWARD -j limit-100 --A FORWARD -j limit-99 --A FORWARD -j limit-98 --A FORWARD -j limit-97 --A FORWARD -j limit-96 --A FORWARD -j limit-95 --A FORWARD -j limit-94 --A FORWARD -j limit-93 --A FORWARD -j limit-92 --A FORWARD -j limit-91 --A FORWARD -j limit-90 --A FORWARD -j limit-89 --A FORWARD -j limit-88 --A FORWARD -j limit-87 --A FORWARD -j limit-86 --A FORWARD -j limit-85 --A FORWARD -j limit-84 --A FORWARD -j limit-83 --A FORWARD -j limit-82 --A FORWARD -j limit-81 --A FORWARD -j limit-80 --A FORWARD -j limit-79 --A FORWARD -j limit-78 --A FORWARD -j limit-77 --A FORWARD -j limit-76 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -j ACCEPT -A FORWARD -j ACCEPT @@ -434,17 +604,17 @@ -A FORWARD -o eth1 -d fc00::/7 -j limit-28 -A FORWARD -o eth1 -d fc00::/7 -j limit-29 -A FORWARD -o eth1 -d fc00::/7 -j limit-30 --A FORWARD -o eth1 -d fc00::/7 -j limit-31 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 -A FORWARD -o eth1 -d fc00::/7 -j limit-32 -A FORWARD -o eth1 -d fc00::/7 -j limit-33 -A FORWARD -o eth1 -d fc00::/7 -j limit-34 --A FORWARD -o eth1 -d fc00::/7 -j limit-35 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36 -A FORWARD -o eth1 -d fc00::/7 -j limit-36 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-37 -A FORWARD -o eth1 -d fc00::/7 -j limit-38 -A FORWARD -o eth1 -d fc00::/7 -j limit-39 -A FORWARD -o eth1 -d fc00::/7 -j limit-40 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-41 -A FORWARD -o eth1 -d fc00::/7 -j limit-42 -A FORWARD -o eth1 -d fc00::/7 -j limit-43 -A FORWARD -o eth1 -d fc00::/7 -j limit-44 @@ -452,23 +622,23 @@ -A FORWARD -o eth1 -d fc00::/7 -j limit-46 -A FORWARD -o eth1 -d fc00::/7 -j limit-47 -A FORWARD -o eth1 -d fc00::/7 -j limit-48 --A FORWARD -o eth1 -d fc00::/7 -j limit-49 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-50 -A FORWARD -o eth1 -d fc00::/7 -j limit-51 -A FORWARD -o eth1 -d fc00::/7 -j limit-52 --A FORWARD -o eth1 -d fc00::/7 -j limit-53 --A FORWARD -o eth1 -d fc00::/7 -j limit-54 -A FORWARD -o eth1 -d fc00::/7 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-54 +-A FORWARD -o eth1 -d fc00::/7 -j limit-55 -A FORWARD -o eth1 -d fc00::/7 -j limit-56 -A FORWARD -o eth1 -d fc00::/7 -j limit-57 -A FORWARD -o eth1 -d fc00::/7 -j limit-58 --A FORWARD -o eth1 -d fc00::/7 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-59 -A FORWARD -o eth1 -d fc00::/7 -j limit-60 --A FORWARD -o eth1 -d fc00::/7 -j limit-61 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-62 -A FORWARD -o eth1 -d fc00::/7 -j limit-63 -A FORWARD -o eth1 -d fc00::/7 -j limit-64 --A FORWARD -o eth1 -d fc00::/7 -j limit-65 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A FORWARD -o eth1 -d fc00::/7 -j limit-66 -A FORWARD -o eth1 -d fc00::/7 -j limit-67 -A FORWARD -o eth1 -d fc00::/7 -j limit-68 @@ -479,6 +649,42 @@ -A FORWARD -o eth1 -d fc00::/7 -j limit-73 -A FORWARD -o eth1 -d fc00::/7 -j limit-74 -A FORWARD -o eth1 -d fc00::/7 -j limit-75 +-A FORWARD -o eth1 -d fc00::/7 -j limit-76 +-A FORWARD -o eth1 -d fc00::/7 -j limit-77 +-A FORWARD -o eth1 -d fc00::/7 -j limit-78 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-80 +-A FORWARD -o eth1 -d fc00::/7 -j limit-81 +-A FORWARD -o eth1 -d fc00::/7 -j limit-82 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-84 +-A FORWARD -o eth1 -d fc00::/7 -j limit-85 +-A FORWARD -o eth1 -d fc00::/7 -j limit-86 +-A FORWARD -o eth1 -d fc00::/7 -j limit-87 +-A FORWARD -o eth1 -d fc00::/7 -j limit-88 +-A FORWARD -o eth1 -d fc00::/7 -j limit-89 +-A FORWARD -o eth1 -d fc00::/7 -j limit-90 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-92 +-A FORWARD -o eth1 -d fc00::/7 -j limit-93 +-A FORWARD -o eth1 -d fc00::/7 -j limit-94 +-A FORWARD -o eth1 -d fc00::/7 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A FORWARD -o eth1 -d fc00::/7 -j limit-96 +-A FORWARD -o eth1 -d fc00::/7 -j limit-97 +-A FORWARD -o eth1 -d fc00::/7 -j limit-98 +-A FORWARD -o eth1 -d fc00::/7 -j limit-99 +-A FORWARD -o eth1 -d fc00::/7 -j limit-100 +-A FORWARD -o eth1 -d fc00::/7 -j limit-101 +-A FORWARD -o eth1 -d fc00::/7 -j limit-102 +-A FORWARD -o eth1 -d fc00::/7 -j limit-103 +-A FORWARD -o eth1 -d fc00::/7 -j limit-104 +-A FORWARD -o eth1 -d fc00::/7 -j limit-105 +-A FORWARD -o eth1 -d fc00::/7 -j limit-106 +-A FORWARD -o eth1 -d fc00::/7 -j limit-107 +-A FORWARD -o eth1 -d fc00::/7 -j limit-108 +-A FORWARD -o eth1 -d fc00::/7 -j limit-109 +-A FORWARD -o eth1 -d fc00::/7 -j limit-110 +-A FORWARD -o eth1 -d fc00::/7 -j limit-111 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-0 -A FORWARD -j ACCEPT @@ -521,16 +727,34 @@ -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-13 -A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-14 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-15 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-16 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-17 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-18 +-A FORWARD -j ACCEPT +-A FORWARD -j ACCEPT +-A FORWARD -j logaccept-final-19 +-A FORWARD -j ACCEPT -A FORWARD -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -j ACCEPT --A FORWARD -j logdrop-73 +-A FORWARD -j logdrop-109 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD -A FORWARD -j logaccept-8 --A FORWARD -j logdrop-74 +-A FORWARD -j logdrop-110 -A FORWARD -j logpass-0 -A FORWARD -j ACCEPT -A FORWARD -j DROP @@ -563,6 +787,78 @@ -A FORWARD -p icmpv6 -j icmp-routing -A INPUT -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A INPUT -j limit-223 +-A INPUT -j limit-222 +-A INPUT -j limit-221 +-A INPUT -j limit-220 +-A INPUT -j limit-219 +-A INPUT -j limit-218 +-A INPUT -j limit-217 +-A INPUT -j limit-216 +-A INPUT -j limit-215 +-A INPUT -j limit-214 +-A INPUT -j limit-213 +-A INPUT -j limit-212 +-A INPUT -j limit-211 +-A INPUT -j limit-210 +-A INPUT -j limit-209 +-A INPUT -j limit-208 +-A INPUT -j limit-207 +-A INPUT -j limit-206 +-A INPUT -j limit-205 +-A INPUT -j limit-204 +-A INPUT -j limit-203 +-A INPUT -j limit-202 +-A INPUT -j limit-201 +-A INPUT -j limit-200 +-A INPUT -j limit-199 +-A INPUT -j limit-198 +-A INPUT -j limit-197 +-A INPUT -j limit-196 +-A INPUT -j limit-195 +-A INPUT -j limit-194 +-A INPUT -j limit-193 +-A INPUT -j limit-192 +-A INPUT -j limit-191 +-A INPUT -j limit-190 +-A INPUT -j limit-189 +-A INPUT -j limit-188 +-A INPUT -j limit-187 +-A INPUT -j limit-186 +-A INPUT -j limit-185 +-A INPUT -j limit-184 +-A INPUT -j limit-183 +-A INPUT -j limit-182 +-A INPUT -j limit-181 +-A INPUT -j limit-180 +-A INPUT -j limit-179 +-A INPUT -j limit-178 +-A INPUT -j limit-177 +-A INPUT -j limit-176 +-A INPUT -j limit-175 +-A INPUT -j limit-174 +-A INPUT -j limit-173 +-A INPUT -j limit-172 +-A INPUT -j limit-171 +-A INPUT -j limit-170 +-A INPUT -j limit-169 +-A INPUT -j limit-168 +-A INPUT -j limit-167 +-A INPUT -j limit-166 +-A INPUT -j limit-165 +-A INPUT -j limit-164 +-A INPUT -j limit-163 +-A INPUT -j limit-162 +-A INPUT -j limit-161 +-A INPUT -j limit-160 +-A INPUT -j limit-159 +-A INPUT -j limit-158 +-A INPUT -j limit-157 +-A INPUT -j limit-156 +-A INPUT -j limit-155 +-A INPUT -j limit-154 +-A INPUT -j limit-153 +-A INPUT -j limit-152 -A INPUT -j limit-151 -A INPUT -j limit-150 -A INPUT -j limit-149 @@ -603,42 +899,6 @@ -A INPUT -j limit-114 -A INPUT -j limit-113 -A INPUT -j limit-112 --A INPUT -j limit-111 --A INPUT -j limit-110 --A INPUT -j limit-109 --A INPUT -j limit-108 --A INPUT -j limit-107 --A INPUT -j limit-106 --A INPUT -j limit-105 --A INPUT -j limit-104 --A INPUT -j limit-103 --A INPUT -j limit-102 --A INPUT -j limit-101 --A INPUT -j limit-100 --A INPUT -j limit-99 --A INPUT -j limit-98 --A INPUT -j limit-97 --A INPUT -j limit-96 --A INPUT -j limit-95 --A INPUT -j limit-94 --A INPUT -j limit-93 --A INPUT -j limit-92 --A INPUT -j limit-91 --A INPUT -j limit-90 --A INPUT -j limit-89 --A INPUT -j limit-88 --A INPUT -j limit-87 --A INPUT -j limit-86 --A INPUT -j limit-85 --A INPUT -j limit-84 --A INPUT -j limit-83 --A INPUT -j limit-82 --A INPUT -j limit-81 --A INPUT -j limit-80 --A INPUT -j limit-79 --A INPUT -j limit-78 --A INPUT -j limit-77 --A INPUT -j limit-76 -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT @@ -689,92 +949,146 @@ -A INPUT -j ACCEPT -A INPUT -j logaccept-final-13 -A INPUT -j ACCEPT --A INPUT -i eth0 -j limit-152 --A INPUT -i eth0 -j limit-153 --A INPUT -i eth0 -j limit-154 --A INPUT -i eth0 -j limit-155 --A INPUT -i eth0 -j limit-156 --A INPUT -i eth0 -j limit-157 --A INPUT -i eth0 -j limit-158 --A INPUT -i eth0 -j limit-159 --A INPUT -i eth0 -j limit-160 --A INPUT -i eth0 -j limit-161 --A INPUT -i eth0 -j limit-162 --A INPUT -i eth0 -j limit-163 --A INPUT -i eth0 -j limit-164 --A INPUT -i eth0 -j limit-165 --A INPUT -i eth0 -j limit-166 --A INPUT -i eth0 -j limit-167 --A INPUT -i eth0 -j limit-168 --A INPUT -i eth0 -j limit-169 --A INPUT -i eth0 -j limit-170 --A INPUT -i eth0 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-68 --A INPUT -i eth0 -j limit-172 --A INPUT -i eth0 -j limit-173 --A INPUT -i eth0 -j limit-174 --A INPUT -i eth0 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-72 --A INPUT -i eth0 -j limit-176 --A INPUT -i eth0 -j limit-177 --A INPUT -i eth0 -j limit-178 --A INPUT -i eth0 -j limit-179 --A INPUT -i eth0 -j limit-180 --A INPUT -i eth0 -j limit-181 --A INPUT -i eth0 -j limit-182 --A INPUT -i eth0 -j limit-183 --A INPUT -i eth0 -j limit-184 --A INPUT -i eth0 -j limit-185 --A INPUT -i eth0 -j limit-186 --A INPUT -i eth0 -j limit-187 --A INPUT -i eth0 -j limit-188 --A INPUT -i eth0 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-190 --A INPUT -i eth0 -j limit-191 --A INPUT -i eth0 -j limit-192 --A INPUT -i eth0 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-194 --A INPUT -i eth0 -j limit-195 --A INPUT -i eth0 -j limit-196 --A INPUT -i eth0 -j limit-197 --A INPUT -i eth0 -j limit-198 --A INPUT -i eth0 -j limit-199 --A INPUT -i eth0 -j limit-200 --A INPUT -i eth0 -j limit-201 --A INPUT -i eth0 -j limit-202 --A INPUT -i eth0 -j limit-203 --A INPUT -i eth0 -j limit-204 --A INPUT -i eth0 -j limit-205 --A INPUT -i eth0 -j limit-206 --A INPUT -i eth0 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-208 --A INPUT -i eth0 -j limit-209 --A INPUT -i eth0 -j limit-210 --A INPUT -i eth0 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A INPUT -i eth0 -j limit-212 --A INPUT -i eth0 -j limit-213 --A INPUT -i eth0 -j limit-214 --A INPUT -i eth0 -j limit-215 --A INPUT -i eth0 -j limit-216 --A INPUT -i eth0 -j limit-217 --A INPUT -i eth0 -j limit-218 --A INPUT -i eth0 -j limit-219 --A INPUT -i eth0 -j limit-220 --A INPUT -i eth0 -j limit-221 --A INPUT -i eth0 -j limit-222 --A INPUT -i eth0 -j limit-223 +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-14 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-15 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-16 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-17 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-18 +-A INPUT -j ACCEPT +-A INPUT -j ACCEPT +-A INPUT -j logaccept-final-19 +-A INPUT -j ACCEPT -A INPUT -i eth0 -j limit-224 -A INPUT -i eth0 -j limit-225 -A INPUT -i eth0 -j limit-226 -A INPUT -i eth0 -j limit-227 +-A INPUT -i eth0 -j limit-228 +-A INPUT -i eth0 -j limit-229 +-A INPUT -i eth0 -j limit-230 +-A INPUT -i eth0 -j limit-231 +-A INPUT -i eth0 -j limit-232 +-A INPUT -i eth0 -j limit-233 +-A INPUT -i eth0 -j limit-234 +-A INPUT -i eth0 -j limit-235 +-A INPUT -i eth0 -j limit-236 +-A INPUT -i eth0 -j limit-237 +-A INPUT -i eth0 -j limit-238 +-A INPUT -i eth0 -j limit-239 +-A INPUT -i eth0 -j limit-240 +-A INPUT -i eth0 -j limit-241 +-A INPUT -i eth0 -j limit-242 +-A INPUT -i eth0 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-92 +-A INPUT -i eth0 -j limit-244 +-A INPUT -i eth0 -j limit-245 +-A INPUT -i eth0 -j limit-246 +-A INPUT -i eth0 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-96 +-A INPUT -i eth0 -j limit-248 +-A INPUT -i eth0 -j limit-249 +-A INPUT -i eth0 -j limit-250 +-A INPUT -i eth0 -j limit-251 +-A INPUT -i eth0 -j limit-252 +-A INPUT -i eth0 -j limit-253 +-A INPUT -i eth0 -j limit-254 +-A INPUT -i eth0 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-104 +-A INPUT -i eth0 -j limit-256 +-A INPUT -i eth0 -j limit-257 +-A INPUT -i eth0 -j limit-258 +-A INPUT -i eth0 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-108 +-A INPUT -i eth0 -j limit-260 +-A INPUT -i eth0 -j limit-261 +-A INPUT -i eth0 -j limit-262 +-A INPUT -i eth0 -j limit-263 +-A INPUT -i eth0 -j limit-264 +-A INPUT -i eth0 -j limit-265 +-A INPUT -i eth0 -j limit-266 +-A INPUT -i eth0 -j limit-267 +-A INPUT -i eth0 -j limit-268 +-A INPUT -i eth0 -j limit-269 +-A INPUT -i eth0 -j limit-270 +-A INPUT -i eth0 -j limit-271 +-A INPUT -i eth0 -j limit-272 +-A INPUT -i eth0 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-274 +-A INPUT -i eth0 -j limit-275 +-A INPUT -i eth0 -j limit-276 +-A INPUT -i eth0 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-278 +-A INPUT -i eth0 -j limit-279 +-A INPUT -i eth0 -j limit-280 +-A INPUT -i eth0 -j limit-281 +-A INPUT -i eth0 -j limit-282 +-A INPUT -i eth0 -j limit-283 +-A INPUT -i eth0 -j limit-284 +-A INPUT -i eth0 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-286 +-A INPUT -i eth0 -j limit-287 +-A INPUT -i eth0 -j limit-288 +-A INPUT -i eth0 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-290 +-A INPUT -i eth0 -j limit-291 +-A INPUT -i eth0 -j limit-292 +-A INPUT -i eth0 -j limit-293 +-A INPUT -i eth0 -j limit-294 +-A INPUT -i eth0 -j limit-295 +-A INPUT -i eth0 -j limit-296 +-A INPUT -i eth0 -j limit-297 +-A INPUT -i eth0 -j limit-298 +-A INPUT -i eth0 -j limit-299 +-A INPUT -i eth0 -j limit-300 +-A INPUT -i eth0 -j limit-301 +-A INPUT -i eth0 -j limit-302 +-A INPUT -i eth0 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-304 +-A INPUT -i eth0 -j limit-305 +-A INPUT -i eth0 -j limit-306 +-A INPUT -i eth0 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-308 +-A INPUT -i eth0 -j limit-309 +-A INPUT -i eth0 -j limit-310 +-A INPUT -i eth0 -j limit-311 +-A INPUT -i eth0 -j limit-312 +-A INPUT -i eth0 -j limit-313 +-A INPUT -i eth0 -j limit-314 +-A INPUT -i eth0 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-316 +-A INPUT -i eth0 -j limit-317 +-A INPUT -i eth0 -j limit-318 +-A INPUT -i eth0 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A INPUT -i eth0 -j limit-320 +-A INPUT -i eth0 -j limit-321 +-A INPUT -i eth0 -j limit-322 +-A INPUT -i eth0 -j limit-323 +-A INPUT -i eth0 -j limit-324 +-A INPUT -i eth0 -j limit-325 +-A INPUT -i eth0 -j limit-326 +-A INPUT -i eth0 -j limit-327 +-A INPUT -i eth0 -j limit-328 +-A INPUT -i eth0 -j limit-329 +-A INPUT -i eth0 -j limit-330 +-A INPUT -i eth0 -j limit-331 +-A INPUT -i eth0 -j limit-332 +-A INPUT -i eth0 -j limit-333 +-A INPUT -i eth0 -j limit-334 +-A INPUT -i eth0 -j limit-335 -A INPUT -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -j ACCEPT --A INPUT -j logdrop-73 +-A INPUT -j logdrop-109 -A INPUT -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT -A INPUT -j logaccept-8 --A INPUT -j logdrop-74 +-A INPUT -j logdrop-110 -A INPUT -j logpass-0 -A INPUT -j ACCEPT -A INPUT -j DROP @@ -787,6 +1101,78 @@ -A INPUT -p icmpv6 -j ACCEPT -A OUTPUT -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A OUTPUT -j limit-223 +-A OUTPUT -j limit-222 +-A OUTPUT -j limit-221 +-A OUTPUT -j limit-220 +-A OUTPUT -j limit-219 +-A OUTPUT -j limit-218 +-A OUTPUT -j limit-217 +-A OUTPUT -j limit-216 +-A OUTPUT -j limit-215 +-A OUTPUT -j limit-214 +-A OUTPUT -j limit-213 +-A OUTPUT -j limit-212 +-A OUTPUT -j limit-211 +-A OUTPUT -j limit-210 +-A OUTPUT -j limit-209 +-A OUTPUT -j limit-208 +-A OUTPUT -j limit-207 +-A OUTPUT -j limit-206 +-A OUTPUT -j limit-205 +-A OUTPUT -j limit-204 +-A OUTPUT -j limit-203 +-A OUTPUT -j limit-202 +-A OUTPUT -j limit-201 +-A OUTPUT -j limit-200 +-A OUTPUT -j limit-199 +-A OUTPUT -j limit-198 +-A OUTPUT -j limit-197 +-A OUTPUT -j limit-196 +-A OUTPUT -j limit-195 +-A OUTPUT -j limit-194 +-A OUTPUT -j limit-193 +-A OUTPUT -j limit-192 +-A OUTPUT -j limit-191 +-A OUTPUT -j limit-190 +-A OUTPUT -j limit-189 +-A OUTPUT -j limit-188 +-A OUTPUT -j limit-187 +-A OUTPUT -j limit-186 +-A OUTPUT -j limit-185 +-A OUTPUT -j limit-184 +-A OUTPUT -j limit-183 +-A OUTPUT -j limit-182 +-A OUTPUT -j limit-181 +-A OUTPUT -j limit-180 +-A OUTPUT -j limit-179 +-A OUTPUT -j limit-178 +-A OUTPUT -j limit-177 +-A OUTPUT -j limit-176 +-A OUTPUT -j limit-175 +-A OUTPUT -j limit-174 +-A OUTPUT -j limit-173 +-A OUTPUT -j limit-172 +-A OUTPUT -j limit-171 +-A OUTPUT -j limit-170 +-A OUTPUT -j limit-169 +-A OUTPUT -j limit-168 +-A OUTPUT -j limit-167 +-A OUTPUT -j limit-166 +-A OUTPUT -j limit-165 +-A OUTPUT -j limit-164 +-A OUTPUT -j limit-163 +-A OUTPUT -j limit-162 +-A OUTPUT -j limit-161 +-A OUTPUT -j limit-160 +-A OUTPUT -j limit-159 +-A OUTPUT -j limit-158 +-A OUTPUT -j limit-157 +-A OUTPUT -j limit-156 +-A OUTPUT -j limit-155 +-A OUTPUT -j limit-154 +-A OUTPUT -j limit-153 +-A OUTPUT -j limit-152 -A OUTPUT -j limit-151 -A OUTPUT -j limit-150 -A OUTPUT -j limit-149 @@ -827,42 +1213,6 @@ -A OUTPUT -j limit-114 -A OUTPUT -j limit-113 -A OUTPUT -j limit-112 --A OUTPUT -j limit-111 --A OUTPUT -j limit-110 --A OUTPUT -j limit-109 --A OUTPUT -j limit-108 --A OUTPUT -j limit-107 --A OUTPUT -j limit-106 --A OUTPUT -j limit-105 --A OUTPUT -j limit-104 --A OUTPUT -j limit-103 --A OUTPUT -j limit-102 --A OUTPUT -j limit-101 --A OUTPUT -j limit-100 --A OUTPUT -j limit-99 --A OUTPUT -j limit-98 --A OUTPUT -j limit-97 --A OUTPUT -j limit-96 --A OUTPUT -j limit-95 --A OUTPUT -j limit-94 --A OUTPUT -j limit-93 --A OUTPUT -j limit-92 --A OUTPUT -j limit-91 --A OUTPUT -j limit-90 --A OUTPUT -j limit-89 --A OUTPUT -j limit-88 --A OUTPUT -j limit-87 --A OUTPUT -j limit-86 --A OUTPUT -j limit-85 --A OUTPUT -j limit-84 --A OUTPUT -j limit-83 --A OUTPUT -j limit-82 --A OUTPUT -j limit-81 --A OUTPUT -j limit-80 --A OUTPUT -j limit-79 --A OUTPUT -j limit-78 --A OUTPUT -j limit-77 --A OUTPUT -j limit-76 -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -j ACCEPT @@ -902,17 +1252,17 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-28 -A OUTPUT -o eth1 -d fc00::/7 -j limit-29 -A OUTPUT -o eth1 -d fc00::/7 -j limit-30 --A OUTPUT -o eth1 -d fc00::/7 -j limit-31 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 -A OUTPUT -o eth1 -d fc00::/7 -j limit-32 -A OUTPUT -o eth1 -d fc00::/7 -j limit-33 -A OUTPUT -o eth1 -d fc00::/7 -j limit-34 --A OUTPUT -o eth1 -d fc00::/7 -j limit-35 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36 -A OUTPUT -o eth1 -d fc00::/7 -j limit-36 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-37 -A OUTPUT -o eth1 -d fc00::/7 -j limit-38 -A OUTPUT -o eth1 -d fc00::/7 -j limit-39 -A OUTPUT -o eth1 -d fc00::/7 -j limit-40 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-41 -A OUTPUT -o eth1 -d fc00::/7 -j limit-42 -A OUTPUT -o eth1 -d fc00::/7 -j limit-43 -A OUTPUT -o eth1 -d fc00::/7 -j limit-44 @@ -920,23 +1270,23 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-46 -A OUTPUT -o eth1 -d fc00::/7 -j limit-47 -A OUTPUT -o eth1 -d fc00::/7 -j limit-48 --A OUTPUT -o eth1 -d fc00::/7 -j limit-49 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-50 -A OUTPUT -o eth1 -d fc00::/7 -j limit-51 -A OUTPUT -o eth1 -d fc00::/7 -j limit-52 --A OUTPUT -o eth1 -d fc00::/7 -j limit-53 --A OUTPUT -o eth1 -d fc00::/7 -j limit-54 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-54 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-55 -A OUTPUT -o eth1 -d fc00::/7 -j limit-56 -A OUTPUT -o eth1 -d fc00::/7 -j limit-57 -A OUTPUT -o eth1 -d fc00::/7 -j limit-58 --A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-59 -A OUTPUT -o eth1 -d fc00::/7 -j limit-60 --A OUTPUT -o eth1 -d fc00::/7 -j limit-61 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-62 -A OUTPUT -o eth1 -d fc00::/7 -j limit-63 -A OUTPUT -o eth1 -d fc00::/7 -j limit-64 --A OUTPUT -o eth1 -d fc00::/7 -j limit-65 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-66 -A OUTPUT -o eth1 -d fc00::/7 -j limit-67 -A OUTPUT -o eth1 -d fc00::/7 -j limit-68 @@ -947,6 +1297,42 @@ -A OUTPUT -o eth1 -d fc00::/7 -j limit-73 -A OUTPUT -o eth1 -d fc00::/7 -j limit-74 -A OUTPUT -o eth1 -d fc00::/7 -j limit-75 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-76 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-77 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-78 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-80 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-81 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-82 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-84 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-85 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-86 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-87 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-88 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-89 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-90 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-92 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-93 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-94 +-A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A OUTPUT -o eth1 -d fc00::/7 -j limit-96 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-97 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-98 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-99 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-100 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-101 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-102 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-103 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-104 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-105 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-106 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-107 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-108 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-109 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-110 +-A OUTPUT -o eth1 -d fc00::/7 -j limit-111 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-0 -A OUTPUT -j ACCEPT @@ -989,6 +1375,42 @@ -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-13 -A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-14 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-15 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-16 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-17 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-18 +-A OUTPUT -j ACCEPT +-A OUTPUT -j ACCEPT +-A OUTPUT -j logaccept-final-19 +-A OUTPUT -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT +-A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT -A OUTPUT -o eth0 -j ACCEPT @@ -1034,13 +1456,13 @@ -A OUTPUT -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -j ACCEPT --A OUTPUT -j logdrop-73 +-A OUTPUT -j logdrop-109 -A OUTPUT -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT -A OUTPUT -j logaccept-8 --A OUTPUT -j logdrop-74 +-A OUTPUT -j logdrop-110 -A OUTPUT -j logpass-0 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP @@ -1061,461 +1483,650 @@ -A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 -A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-102 -m recent --name limit-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-102 -m recent --name limit-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-103 -m recent --name limit-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-103 -m recent --name limit-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-104 -m recent --name limit-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-104 -m recent --name limit-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-105 -m recent --name limit-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-105 -m recent --name limit-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-106 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-106 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-107 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-107 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-108 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-108 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-109 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-109 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-100 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-100 -j ACCEPT +-A limit-100 -m limit --limit 1/second -j LOG +-A limit-100 -j DROP +-A limit-101 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-101 -j RETURN +-A limit-101 -m limit --limit 1/second -j LOG +-A limit-101 -j DROP +-A limit-102 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-102 -j logaccept-1 +-A limit-102 -m limit --limit 1/second -j LOG +-A limit-102 -j DROP +-A limit-103 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-103 -j ACCEPT +-A limit-103 -m limit --limit 1/second -j LOG +-A limit-103 -j DROP +-A limit-104 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-104 -j ACCEPT +-A limit-104 -j DROP +-A limit-105 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-105 -j RETURN +-A limit-105 -j DROP +-A limit-106 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-106 -j logaccept-2 +-A limit-106 -j DROP +-A limit-107 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-107 -j ACCEPT +-A limit-107 -j DROP +-A limit-108 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-108 -j ACCEPT +-A limit-108 -j DROP +-A limit-109 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-109 -j RETURN +-A limit-109 -j DROP -A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 -A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-110 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-110 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-111 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-111 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-112 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-113 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-114 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-115 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-115 -m limit --limit 1/second -j LOG --A limit-116 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-117 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-110 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-110 -j logaccept-3 +-A limit-110 -j DROP +-A limit-111 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-111 -j ACCEPT +-A limit-111 -j DROP +-A limit-112 -m recent --name limit-112 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-37 +-A limit-112 -m recent --name limit-112 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-113 -m recent --name limit-113 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-38 +-A limit-113 -m recent --name limit-113 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-39 +-A limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-40 +-A limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-41 +-A limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-42 +-A limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-43 -A limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-44 -A limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-12 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 -A limit-12 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-120 -m recent --name limit-120 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-120 -m recent --name limit-120 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-45 -A limit-120 -m recent --name limit-120 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-121 -m recent --name limit-121 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-121 -m recent --name limit-121 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-46 -A limit-121 -m recent --name limit-121 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-122 -m recent --name limit-122 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-122 -m recent --name limit-122 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-47 -A limit-122 -m recent --name limit-122 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-123 -m recent --name limit-123 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-123 -m recent --name limit-123 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-48 -A limit-123 -m recent --name limit-123 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-124 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-124 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-49 -A limit-124 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-125 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-125 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-50 -A limit-125 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-126 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-126 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-51 -A limit-126 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-127 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-127 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-52 -A limit-127 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-128 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-128 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-53 -A limit-128 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-129 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-129 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-54 -A limit-129 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-13 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 -A limit-13 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-130 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-131 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-132 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-133 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-130 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-55 +-A limit-131 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-56 +-A limit-132 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-57 +-A limit-133 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-58 -A limit-133 -m limit --limit 1/second -j LOG --A limit-134 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-135 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-136 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-136 -j RETURN --A limit-136 -m limit --limit 1/second -j LOG --A limit-136 -j DROP --A limit-137 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-137 -j RETURN --A limit-137 -m limit --limit 1/second -j LOG --A limit-137 -j DROP --A limit-138 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-138 -j RETURN --A limit-138 -m limit --limit 1/second -j LOG --A limit-138 -j DROP --A limit-139 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-139 -j RETURN --A limit-139 -m limit --limit 1/second -j LOG --A limit-139 -j DROP +-A limit-134 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-59 +-A limit-135 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-60 +-A limit-136 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-61 +-A limit-136 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-137 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-62 +-A limit-137 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-138 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-63 +-A limit-138 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-139 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-64 +-A limit-139 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-14 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 -A limit-14 -m limit --limit 1/second -j LOG -A limit-14 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-140 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-140 -j RETURN --A limit-140 -m limit --limit 1/second -j LOG --A limit-140 -j DROP --A limit-141 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-141 -j RETURN --A limit-141 -m limit --limit 1/second -j LOG --A limit-141 -j DROP --A limit-142 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-142 -j RETURN --A limit-142 -m limit --limit 1/second -j LOG --A limit-142 -j DROP --A limit-143 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-143 -j RETURN --A limit-143 -m limit --limit 1/second -j LOG --A limit-143 -j DROP --A limit-144 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-144 -j RETURN --A limit-144 -j DROP --A limit-145 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-145 -j RETURN --A limit-145 -j DROP --A limit-146 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-146 -j RETURN --A limit-146 -j DROP --A limit-147 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-147 -j RETURN --A limit-147 -j DROP --A limit-148 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-148 -j RETURN --A limit-148 -j DROP --A limit-149 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-149 -j RETURN --A limit-149 -j DROP +-A limit-140 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-65 +-A limit-140 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-141 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-66 +-A limit-141 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-142 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-67 +-A limit-143 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-68 +-A limit-144 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-69 +-A limit-145 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-70 +-A limit-145 -m limit --limit 1/second -j LOG +-A limit-146 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-71 +-A limit-147 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-72 +-A limit-148 -m recent --name limit-148 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-148 -m recent --name limit-148 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-149 -m recent --name limit-149 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-149 -m recent --name limit-149 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-15 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 -A limit-15 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-150 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-150 -j RETURN --A limit-150 -j DROP --A limit-151 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-151 -j RETURN --A limit-151 -j DROP --A limit-152 -m recent --name limit-152 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-49 --A limit-152 -m recent --name limit-152 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-153 -m recent --name limit-153 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-50 +-A limit-150 -m recent --name limit-150 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-150 -m recent --name limit-150 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-151 -m recent --name limit-151 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-151 -m recent --name limit-151 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-152 -m recent --name limit-152 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-152 -m recent --name limit-152 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-153 -m recent --name limit-153 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-153 -m recent --name limit-153 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-154 -m recent --name limit-154 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-51 --A limit-154 -m limit --limit 1/second -j LOG --A limit-154 -m recent --name limit-154 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-155 -m recent --name limit-155 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-52 --A limit-155 -m recent --name limit-155 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-156 -m recent --name limit-156 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-53 --A limit-156 -m recent --name limit-156 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-157 -m recent --name limit-157 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-54 --A limit-157 -m recent --name limit-157 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-158 -m recent --name limit-158 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-55 --A limit-158 -m recent --name limit-158 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-159 -m recent --name limit-159 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-56 --A limit-159 -m recent --name limit-159 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-154 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-154 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-155 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-155 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-156 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-156 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-157 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-157 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-158 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-158 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-159 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-159 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-16 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 -A limit-16 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-160 -m recent --name limit-160 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-57 --A limit-160 -m limit --limit 1/second -j LOG --A limit-160 -m recent --name limit-160 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-161 -m recent --name limit-161 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-58 --A limit-161 -m recent --name limit-161 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-162 -m recent --name limit-162 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-59 --A limit-162 -m recent --name limit-162 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-163 -m recent --name limit-163 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-60 --A limit-163 -m recent --name limit-163 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-164 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-61 --A limit-164 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-165 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-62 --A limit-165 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-166 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-63 --A limit-166 -m limit --limit 1/second -j LOG --A limit-166 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-167 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-64 --A limit-167 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-168 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-65 --A limit-168 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-169 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-66 --A limit-169 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-160 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-161 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-162 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-163 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-163 -m limit --limit 1/second -j LOG +-A limit-164 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-165 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-166 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-166 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-167 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-167 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-168 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-168 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-169 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-169 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-17 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-18 -A limit-17 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-170 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-67 --A limit-170 -j ACCEPT --A limit-172 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-69 --A limit-172 -m limit --limit 1/second -j LOG --A limit-172 -j ACCEPT --A limit-173 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-70 --A limit-173 -m limit --limit 1/second -j LOG --A limit-174 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-71 --A limit-174 -j ACCEPT --A limit-176 -m recent --name limit-176 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-176 -m recent --name limit-176 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-177 -m recent --name limit-177 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-177 -m recent --name limit-177 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-170 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-170 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-171 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-171 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-172 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-173 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-174 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-175 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-175 -m limit --limit 1/second -j LOG +-A limit-176 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-177 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-178 -m recent --name limit-178 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-178 -m limit --limit 1/second -j LOG --A limit-178 -m recent --name limit-178 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-178 -m recent --name limit-178 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-179 -m recent --name limit-179 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-179 -m recent --name limit-179 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-179 -m recent --name limit-179 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-18 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-19 -A limit-18 -j ACCEPT -A limit-180 -m recent --name limit-180 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-180 -m recent --name limit-180 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-180 -m recent --name limit-180 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-181 -m recent --name limit-181 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-181 -m recent --name limit-181 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-182 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-182 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-183 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-183 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-181 -m recent --name limit-181 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-182 -m recent --name limit-182 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-182 -m recent --name limit-182 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-183 -m recent --name limit-183 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-183 -m recent --name limit-183 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-184 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-184 -m limit --limit 1/second -j LOG --A limit-184 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-184 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-185 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-185 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-185 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-186 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-186 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-186 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-187 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-187 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-188 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-188 -j ACCEPT +-A limit-187 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-188 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-188 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-189 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-189 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-190 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-190 -m limit --limit 1/second -j LOG --A limit-190 -j ACCEPT -A limit-191 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-191 -m limit --limit 1/second -j LOG -A limit-192 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-192 -j ACCEPT --A limit-194 -m recent --name limit-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-194 -m recent --name limit-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-195 -m recent --name limit-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-195 -m recent --name limit-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-196 -m recent --name limit-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-196 -m limit --limit 1/second -j LOG --A limit-196 -m recent --name limit-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-197 -m recent --name limit-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-197 -m recent --name limit-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-198 -m recent --name limit-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-198 -m recent --name limit-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-199 -m recent --name limit-199 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-199 -m recent --name limit-199 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-193 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-193 -m limit --limit 1/second -j LOG +-A limit-194 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-195 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-196 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-196 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-197 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-197 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-198 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-198 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-199 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-199 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 -A limit-2 -m limit --limit 1/second -j LOG -A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-20 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-21 -A limit-20 -m limit --limit 1/second -j LOG -A limit-20 -j ACCEPT --A limit-200 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-200 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-201 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-201 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-202 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-202 -m limit --limit 1/second -j LOG --A limit-202 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-203 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-203 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-204 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-204 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-205 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-205 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-206 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-206 -j ACCEPT --A limit-208 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-200 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-200 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-201 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-201 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-202 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-203 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-204 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-205 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-205 -m limit --limit 1/second -j LOG +-A limit-206 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-207 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-208 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-208 -j RETURN -A limit-208 -m limit --limit 1/second -j LOG --A limit-208 -j ACCEPT --A limit-209 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-208 -j DROP +-A limit-209 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-209 -j RETURN -A limit-209 -m limit --limit 1/second -j LOG +-A limit-209 -j DROP -A limit-21 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-22 -A limit-21 -m limit --limit 1/second -j LOG --A limit-210 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-210 -j ACCEPT --A limit-212 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-212 -j ACCEPT +-A limit-210 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-210 -j RETURN +-A limit-210 -m limit --limit 1/second -j LOG +-A limit-210 -j DROP +-A limit-211 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-211 -j RETURN +-A limit-211 -m limit --limit 1/second -j LOG +-A limit-211 -j DROP +-A limit-212 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-212 -j RETURN -A limit-212 -m limit --limit 1/second -j LOG -A limit-212 -j DROP -A limit-213 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-213 -j RETURN -A limit-213 -m limit --limit 1/second -j LOG -A limit-213 -j DROP --A limit-214 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-214 -j logaccept-4 +-A limit-214 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-214 -j RETURN -A limit-214 -m limit --limit 1/second -j LOG -A limit-214 -j DROP --A limit-215 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-215 -j ACCEPT +-A limit-215 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-215 -j RETURN -A limit-215 -m limit --limit 1/second -j LOG -A limit-215 -j DROP --A limit-216 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-216 -j ACCEPT --A limit-216 -m limit --limit 1/second -j LOG +-A limit-216 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-216 -j RETURN -A limit-216 -j DROP -A limit-217 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-217 -j RETURN --A limit-217 -m limit --limit 1/second -j LOG -A limit-217 -j DROP --A limit-218 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-218 -j logaccept-5 --A limit-218 -m limit --limit 1/second -j LOG +-A limit-218 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-218 -j RETURN -A limit-218 -j DROP --A limit-219 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-219 -j ACCEPT --A limit-219 -m limit --limit 1/second -j LOG +-A limit-219 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-219 -j RETURN -A limit-219 -j DROP -A limit-22 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-23 -A limit-22 -j ACCEPT --A limit-220 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-220 -j ACCEPT +-A limit-220 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-220 -j RETURN -A limit-220 -j DROP -A limit-221 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-221 -j RETURN -A limit-221 -j DROP --A limit-222 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-222 -j logaccept-6 +-A limit-222 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-222 -j RETURN -A limit-222 -j DROP --A limit-223 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-223 -j ACCEPT +-A limit-223 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-223 -j RETURN -A limit-223 -j DROP --A limit-224 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-224 -j ACCEPT --A limit-224 -j DROP --A limit-225 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-225 -j RETURN --A limit-225 -j DROP --A limit-226 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-226 -j logaccept-7 --A limit-226 -j DROP --A limit-227 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-227 -j ACCEPT --A limit-227 -j DROP --A limit-24 -m recent --name limit-24 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-24 -m recent --name limit-24 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-25 -m recent --name limit-25 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-25 -m recent --name limit-25 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-26 -m recent --name limit-26 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-73 +-A limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-74 +-A limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-75 +-A limit-226 -m limit --limit 1/second -j LOG +-A limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-76 +-A limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-228 -m recent --name limit-228 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-77 +-A limit-228 -m recent --name limit-228 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-229 -m recent --name limit-229 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-78 +-A limit-229 -m recent --name limit-229 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-230 -m recent --name limit-230 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-79 +-A limit-230 -m recent --name limit-230 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-231 -m recent --name limit-231 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-80 +-A limit-231 -m recent --name limit-231 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-232 -m recent --name limit-232 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-81 +-A limit-232 -m limit --limit 1/second -j LOG +-A limit-232 -m recent --name limit-232 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-233 -m recent --name limit-233 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-82 +-A limit-233 -m recent --name limit-233 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-234 -m recent --name limit-234 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-83 +-A limit-234 -m recent --name limit-234 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-235 -m recent --name limit-235 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-84 +-A limit-235 -m recent --name limit-235 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-236 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-85 +-A limit-236 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-237 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-86 +-A limit-237 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-238 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-87 +-A limit-238 -m limit --limit 1/second -j LOG +-A limit-238 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-239 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-88 +-A limit-239 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-24 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 +-A limit-24 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-240 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-89 +-A limit-240 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-241 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-90 +-A limit-241 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-242 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-91 +-A limit-242 -j ACCEPT +-A limit-244 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-93 +-A limit-244 -m limit --limit 1/second -j LOG +-A limit-244 -j ACCEPT +-A limit-245 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-94 +-A limit-245 -m limit --limit 1/second -j LOG +-A limit-246 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-95 +-A limit-246 -j ACCEPT +-A limit-248 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-97 +-A limit-248 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-249 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-98 +-A limit-249 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-25 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 +-A limit-25 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-250 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-99 +-A limit-250 -m limit --limit 1/second -j LOG +-A limit-250 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-251 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-100 +-A limit-251 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-252 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-101 +-A limit-252 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-253 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-102 +-A limit-253 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-254 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-103 +-A limit-254 -j ACCEPT +-A limit-256 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-105 +-A limit-256 -m limit --limit 1/second -j LOG +-A limit-256 -j ACCEPT +-A limit-257 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-106 +-A limit-257 -m limit --limit 1/second -j LOG +-A limit-258 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-107 +-A limit-258 -j ACCEPT +-A limit-26 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 -A limit-26 -m limit --limit 1/second -j LOG --A limit-26 -m recent --name limit-26 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-27 -m recent --name limit-27 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-27 -m recent --name limit-27 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-28 -m recent --name limit-28 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-28 -m recent --name limit-28 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-29 -m recent --name limit-29 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-29 -m recent --name limit-29 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-26 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-260 -m recent --name limit-260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-260 -m recent --name limit-260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-261 -m recent --name limit-261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-261 -m recent --name limit-261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-262 -m recent --name limit-262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-262 -m limit --limit 1/second -j LOG +-A limit-262 -m recent --name limit-262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-263 -m recent --name limit-263 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-263 -m recent --name limit-263 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-264 -m recent --name limit-264 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-264 -m recent --name limit-264 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-265 -m recent --name limit-265 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-265 -m recent --name limit-265 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-266 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-266 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-267 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-267 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-268 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-268 -m limit --limit 1/second -j LOG +-A limit-268 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-269 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-269 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-27 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 +-A limit-27 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-270 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-270 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-271 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-271 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-272 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-272 -j ACCEPT +-A limit-274 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-274 -m limit --limit 1/second -j LOG +-A limit-274 -j ACCEPT +-A limit-275 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-275 -m limit --limit 1/second -j LOG +-A limit-276 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-276 -j ACCEPT +-A limit-278 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-278 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-279 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-279 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-28 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 +-A limit-28 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-280 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-280 -m limit --limit 1/second -j LOG +-A limit-280 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-281 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-281 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-282 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-282 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-283 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-283 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-284 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-284 -j ACCEPT +-A limit-286 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-286 -m limit --limit 1/second -j LOG +-A limit-286 -j ACCEPT +-A limit-287 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-287 -m limit --limit 1/second -j LOG +-A limit-288 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-288 -j ACCEPT +-A limit-29 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-30 +-A limit-29 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-290 -m recent --name limit-290 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-290 -m recent --name limit-290 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-291 -m recent --name limit-291 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-291 -m recent --name limit-291 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-292 -m recent --name limit-292 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-292 -m limit --limit 1/second -j LOG +-A limit-292 -m recent --name limit-292 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-293 -m recent --name limit-293 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-293 -m recent --name limit-293 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-294 -m recent --name limit-294 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-294 -m recent --name limit-294 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-295 -m recent --name limit-295 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-295 -m recent --name limit-295 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-296 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-296 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-297 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-297 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-298 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-298 -m limit --limit 1/second -j LOG +-A limit-298 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-299 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-299 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 -A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-30 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-30 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-31 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-31 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-32 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-30 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 +-A limit-30 -j ACCEPT +-A limit-300 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-300 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-301 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-301 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-302 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-302 -j ACCEPT +-A limit-304 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-304 -m limit --limit 1/second -j LOG +-A limit-304 -j ACCEPT +-A limit-305 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-305 -m limit --limit 1/second -j LOG +-A limit-306 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-306 -j ACCEPT +-A limit-308 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-308 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-309 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-309 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-310 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-310 -m limit --limit 1/second -j LOG +-A limit-310 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-311 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-311 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-312 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-312 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-313 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-313 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-314 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-314 -j ACCEPT +-A limit-316 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-316 -m limit --limit 1/second -j LOG +-A limit-316 -j ACCEPT +-A limit-317 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-317 -m limit --limit 1/second -j LOG +-A limit-318 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-318 -j ACCEPT +-A limit-32 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 -A limit-32 -m limit --limit 1/second -j LOG --A limit-32 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-33 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-33 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-34 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-34 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-35 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-35 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-36 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-36 -j ACCEPT --A limit-38 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-32 -j ACCEPT +-A limit-320 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-320 -j ACCEPT +-A limit-320 -m limit --limit 1/second -j LOG +-A limit-320 -j DROP +-A limit-321 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-321 -j RETURN +-A limit-321 -m limit --limit 1/second -j LOG +-A limit-321 -j DROP +-A limit-322 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-322 -j logaccept-4 +-A limit-322 -m limit --limit 1/second -j LOG +-A limit-322 -j DROP +-A limit-323 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-323 -j ACCEPT +-A limit-323 -m limit --limit 1/second -j LOG +-A limit-323 -j DROP +-A limit-324 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-324 -j ACCEPT +-A limit-324 -m limit --limit 1/second -j LOG +-A limit-324 -j DROP +-A limit-325 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-325 -j RETURN +-A limit-325 -m limit --limit 1/second -j LOG +-A limit-325 -j DROP +-A limit-326 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-326 -j logaccept-5 +-A limit-326 -m limit --limit 1/second -j LOG +-A limit-326 -j DROP +-A limit-327 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-327 -j ACCEPT +-A limit-327 -m limit --limit 1/second -j LOG +-A limit-327 -j DROP +-A limit-328 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-328 -j ACCEPT +-A limit-328 -j DROP +-A limit-329 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-329 -j RETURN +-A limit-329 -j DROP +-A limit-33 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 +-A limit-33 -m limit --limit 1/second -j LOG +-A limit-330 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-330 -j logaccept-6 +-A limit-330 -j DROP +-A limit-331 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-331 -j ACCEPT +-A limit-331 -j DROP +-A limit-332 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j ACCEPT +-A limit-332 -j DROP +-A limit-333 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-333 -j RETURN +-A limit-333 -j DROP +-A limit-334 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-334 -j logaccept-7 +-A limit-334 -j DROP +-A limit-335 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-335 -j ACCEPT +-A limit-335 -j DROP +-A limit-34 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 +-A limit-34 -j ACCEPT +-A limit-36 -m recent --name limit-36 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-36 -m recent --name limit-36 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-37 -m recent --name limit-37 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-37 -m recent --name limit-37 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-38 -m recent --name limit-38 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-38 -m limit --limit 1/second -j LOG --A limit-38 -j ACCEPT --A limit-39 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-39 -m limit --limit 1/second -j LOG +-A limit-38 -m recent --name limit-38 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-39 -m recent --name limit-39 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-39 -m recent --name limit-39 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 -A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-40 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-40 -j ACCEPT --A limit-42 -m recent --name limit-42 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-42 -m recent --name limit-42 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-43 -m recent --name limit-43 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-43 -m recent --name limit-43 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-44 -m recent --name limit-44 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-40 -m recent --name limit-40 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-40 -m recent --name limit-40 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-41 -m recent --name limit-41 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-41 -m recent --name limit-41 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-42 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-42 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-43 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-43 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-44 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-44 -m limit --limit 1/second -j LOG --A limit-44 -m recent --name limit-44 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-45 -m recent --name limit-45 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-45 -m recent --name limit-45 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-46 -m recent --name limit-46 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-46 -m recent --name limit-46 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-47 -m recent --name limit-47 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-47 -m recent --name limit-47 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-48 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-48 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-49 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-49 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-44 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-45 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-45 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-46 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-46 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-47 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-47 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-48 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-48 -j ACCEPT -A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 -A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-50 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-50 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-50 -m limit --limit 1/second -j LOG --A limit-50 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-51 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-51 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-52 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-52 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-53 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP --A limit-53 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-54 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-54 -j ACCEPT --A limit-56 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-50 -j ACCEPT +-A limit-51 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-51 -m limit --limit 1/second -j LOG +-A limit-52 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-52 -j ACCEPT +-A limit-54 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-54 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-55 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-55 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-56 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-56 -m limit --limit 1/second -j LOG --A limit-56 -j ACCEPT --A limit-57 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-57 -m limit --limit 1/second -j LOG --A limit-58 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP --A limit-58 -j ACCEPT +-A limit-56 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-57 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-57 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-58 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-58 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-59 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-59 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 -A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-60 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-60 -j ACCEPT --A limit-60 -m limit --limit 1/second -j LOG --A limit-60 -j DROP --A limit-61 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-61 -j RETURN --A limit-61 -m limit --limit 1/second -j LOG --A limit-61 -j DROP --A limit-62 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-62 -j logaccept-0 +-A limit-60 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-60 -j ACCEPT +-A limit-62 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-62 -m limit --limit 1/second -j LOG --A limit-62 -j DROP --A limit-63 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-63 -j ACCEPT +-A limit-62 -j ACCEPT +-A limit-63 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-63 -m limit --limit 1/second -j LOG --A limit-63 -j DROP --A limit-64 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-64 -j ACCEPT --A limit-64 -m limit --limit 1/second -j LOG --A limit-64 -j DROP --A limit-65 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-65 -j RETURN --A limit-65 -m limit --limit 1/second -j LOG --A limit-65 -j DROP --A limit-66 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-66 -j logaccept-1 --A limit-66 -m limit --limit 1/second -j LOG --A limit-66 -j DROP --A limit-67 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-67 -j ACCEPT --A limit-67 -m limit --limit 1/second -j LOG --A limit-67 -j DROP --A limit-68 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-68 -j ACCEPT --A limit-68 -j DROP --A limit-69 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-69 -j RETURN --A limit-69 -j DROP +-A limit-64 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-64 -j ACCEPT +-A limit-66 -m recent --name limit-66 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-66 -m recent --name limit-66 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-67 -m recent --name limit-67 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-67 -m recent --name limit-67 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-68 -m recent --name limit-68 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-68 -m limit --limit 1/second -j LOG +-A limit-68 -m recent --name limit-68 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-69 -m recent --name limit-69 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-69 -m recent --name limit-69 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 -A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-70 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-70 -j logaccept-2 --A limit-70 -j DROP --A limit-71 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-71 -j ACCEPT --A limit-71 -j DROP --A limit-72 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-72 -j ACCEPT --A limit-72 -j DROP --A limit-73 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-73 -j RETURN --A limit-73 -j DROP --A limit-74 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-74 -j logaccept-3 --A limit-74 -j DROP --A limit-75 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-75 -j ACCEPT --A limit-75 -j DROP --A limit-76 -m recent --name limit-76 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 --A limit-76 -m recent --name limit-76 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-77 -m recent --name limit-77 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 --A limit-77 -m recent --name limit-77 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-78 -m recent --name limit-78 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 --A limit-78 -m recent --name limit-78 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-79 -m recent --name limit-79 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 --A limit-79 -m recent --name limit-79 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-70 -m recent --name limit-70 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-70 -m recent --name limit-70 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-71 -m recent --name limit-71 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-71 -m recent --name limit-71 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-72 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-72 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-73 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-73 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-74 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-74 -m limit --limit 1/second -j LOG +-A limit-74 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-75 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-75 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-76 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-76 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-77 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-77 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-78 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-78 -j ACCEPT -A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 -A limit-8 -m limit --limit 1/second -j LOG -A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT --A limit-80 -m recent --name limit-80 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 --A limit-80 -m recent --name limit-80 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-81 -m recent --name limit-81 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-30 --A limit-81 -m recent --name limit-81 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-82 -m recent --name limit-82 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-31 --A limit-82 -m recent --name limit-82 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-83 -m recent --name limit-83 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-32 --A limit-83 -m recent --name limit-83 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-84 -m recent --name limit-84 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-33 --A limit-84 -m recent --name limit-84 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-85 -m recent --name limit-85 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-34 --A limit-85 -m recent --name limit-85 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-86 -m recent --name limit-86 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-35 --A limit-86 -m recent --name limit-86 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-87 -m recent --name limit-87 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-36 --A limit-87 -m recent --name limit-87 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-88 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-37 --A limit-88 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-89 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-38 --A limit-89 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-80 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-80 -m limit --limit 1/second -j LOG +-A limit-80 -j ACCEPT +-A limit-81 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-81 -m limit --limit 1/second -j LOG +-A limit-82 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-82 -j ACCEPT +-A limit-84 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-84 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-85 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-85 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +-A limit-86 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-86 -m limit --limit 1/second -j LOG +-A limit-86 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-87 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-87 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG +-A limit-88 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-88 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT +-A limit-89 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP +-A limit-89 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 -A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-90 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-39 --A limit-90 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-91 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-40 --A limit-91 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG --A limit-92 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-41 --A limit-92 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-93 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-42 --A limit-93 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set --A limit-94 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-43 --A limit-95 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-44 --A limit-96 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-45 --A limit-97 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-46 +-A limit-90 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-90 -j ACCEPT +-A limit-92 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-92 -m limit --limit 1/second -j LOG +-A limit-92 -j ACCEPT +-A limit-93 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-93 -m limit --limit 1/second -j LOG +-A limit-94 -m recent --name user:foo --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +-A limit-94 -j ACCEPT +-A limit-96 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-96 -j ACCEPT +-A limit-96 -m limit --limit 1/second -j LOG +-A limit-96 -j DROP +-A limit-97 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-97 -j RETURN -A limit-97 -m limit --limit 1/second -j LOG --A limit-98 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-47 --A limit-99 -m recent --name user:foo --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-48 +-A limit-97 -j DROP +-A limit-98 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-98 -j logaccept-0 +-A limit-98 -m limit --limit 1/second -j LOG +-A limit-98 -j DROP +-A limit-99 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-99 -j ACCEPT +-A limit-99 -m limit --limit 1/second -j LOG +-A limit-99 -j DROP -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT -A logaccept-1 -m limit --limit 1/second -j LOG @@ -1546,6 +2157,18 @@ -A logaccept-final-12 -j ACCEPT -A logaccept-final-13 -m limit --limit 1/second -j LOG -A logaccept-final-13 -j ACCEPT +-A logaccept-final-14 -m limit --limit 1/second -j LOG +-A logaccept-final-14 -j ACCEPT +-A logaccept-final-15 -m limit --limit 1/second -j LOG +-A logaccept-final-15 -j ACCEPT +-A logaccept-final-16 -m limit --limit 1/second -j LOG +-A logaccept-final-16 -j ACCEPT +-A logaccept-final-17 -m limit --limit 1/second -j LOG +-A logaccept-final-17 -j ACCEPT +-A logaccept-final-18 -m limit --limit 1/second -j LOG +-A logaccept-final-18 -j ACCEPT +-A logaccept-final-19 -m limit --limit 1/second -j LOG +-A logaccept-final-19 -j ACCEPT -A logaccept-final-2 -m limit --limit 1/second -j LOG -A logaccept-final-2 -j ACCEPT -A logaccept-final-3 -m limit --limit 1/second -j LOG @@ -1568,8 +2191,26 @@ -A logdrop-1 -j DROP -A logdrop-10 -m limit --limit 1/second -j LOG -A logdrop-10 -j DROP +-A logdrop-100 -m limit --limit 1/second -j LOG +-A logdrop-100 -j DROP +-A logdrop-101 -m limit --limit 1/second -j LOG +-A logdrop-101 -j DROP +-A logdrop-102 -m limit --limit 1/second -j LOG +-A logdrop-102 -j DROP +-A logdrop-103 -m limit --limit 1/second -j LOG +-A logdrop-103 -j DROP +-A logdrop-105 -m limit --limit 1/second -j LOG +-A logdrop-105 -j DROP +-A logdrop-106 -m limit --limit 1/second -j LOG +-A logdrop-106 -j DROP +-A logdrop-107 -m limit --limit 1/second -j LOG +-A logdrop-107 -j DROP +-A logdrop-109 -m limit --limit 1/second -j LOG +-A logdrop-109 -j DROP -A logdrop-11 -m limit --limit 1/second -j LOG -A logdrop-11 -j DROP +-A logdrop-110 -m limit --limit 1/second -j LOG +-A logdrop-110 -j DROP -A logdrop-12 -m limit --limit 1/second -j LOG -A logdrop-12 -j DROP -A logdrop-13 -m limit --limit 1/second -j LOG @@ -1610,16 +2251,12 @@ -A logdrop-30 -j DROP -A logdrop-31 -m limit --limit 1/second -j LOG -A logdrop-31 -j DROP --A logdrop-32 -m limit --limit 1/second -j LOG --A logdrop-32 -j DROP -A logdrop-33 -m limit --limit 1/second -j LOG -A logdrop-33 -j DROP -A logdrop-34 -m limit --limit 1/second -j LOG -A logdrop-34 -j DROP -A logdrop-35 -m limit --limit 1/second -j LOG -A logdrop-35 -j DROP --A logdrop-36 -m limit --limit 1/second -j LOG --A logdrop-36 -j DROP -A logdrop-37 -m limit --limit 1/second -j LOG -A logdrop-37 -j DROP -A logdrop-38 -m limit --limit 1/second -j LOG @@ -1688,6 +2325,8 @@ -A logdrop-66 -j DROP -A logdrop-67 -m limit --limit 1/second -j LOG -A logdrop-67 -j DROP +-A logdrop-68 -m limit --limit 1/second -j LOG +-A logdrop-68 -j DROP -A logdrop-69 -m limit --limit 1/second -j LOG -A logdrop-69 -j DROP -A logdrop-7 -m limit --limit 1/second -j LOG @@ -1696,14 +2335,62 @@ -A logdrop-70 -j DROP -A logdrop-71 -m limit --limit 1/second -j LOG -A logdrop-71 -j DROP +-A logdrop-72 -m limit --limit 1/second -j LOG +-A logdrop-72 -j DROP -A logdrop-73 -m limit --limit 1/second -j LOG -A logdrop-73 -j DROP -A logdrop-74 -m limit --limit 1/second -j LOG -A logdrop-74 -j DROP +-A logdrop-75 -m limit --limit 1/second -j LOG +-A logdrop-75 -j DROP +-A logdrop-76 -m limit --limit 1/second -j LOG +-A logdrop-76 -j DROP +-A logdrop-77 -m limit --limit 1/second -j LOG +-A logdrop-77 -j DROP +-A logdrop-78 -m limit --limit 1/second -j LOG +-A logdrop-78 -j DROP +-A logdrop-79 -m limit --limit 1/second -j LOG +-A logdrop-79 -j DROP -A logdrop-8 -m limit --limit 1/second -j LOG -A logdrop-8 -j DROP +-A logdrop-80 -m limit --limit 1/second -j LOG +-A logdrop-80 -j DROP +-A logdrop-81 -m limit --limit 1/second -j LOG +-A logdrop-81 -j DROP +-A logdrop-82 -m limit --limit 1/second -j LOG +-A logdrop-82 -j DROP +-A logdrop-83 -m limit --limit 1/second -j LOG +-A logdrop-83 -j DROP +-A logdrop-84 -m limit --limit 1/second -j LOG +-A logdrop-84 -j DROP +-A logdrop-85 -m limit --limit 1/second -j LOG +-A logdrop-85 -j DROP +-A logdrop-86 -m limit --limit 1/second -j LOG +-A logdrop-86 -j DROP +-A logdrop-87 -m limit --limit 1/second -j LOG +-A logdrop-87 -j DROP +-A logdrop-88 -m limit --limit 1/second -j LOG +-A logdrop-88 -j DROP +-A logdrop-89 -m limit --limit 1/second -j LOG +-A logdrop-89 -j DROP -A logdrop-9 -m limit --limit 1/second -j LOG -A logdrop-9 -j DROP +-A logdrop-90 -m limit --limit 1/second -j LOG +-A logdrop-90 -j DROP +-A logdrop-91 -m limit --limit 1/second -j LOG +-A logdrop-91 -j DROP +-A logdrop-93 -m limit --limit 1/second -j LOG +-A logdrop-93 -j DROP +-A logdrop-94 -m limit --limit 1/second -j LOG +-A logdrop-94 -j DROP +-A logdrop-95 -m limit --limit 1/second -j LOG +-A logdrop-95 -j DROP +-A logdrop-97 -m limit --limit 1/second -j LOG +-A logdrop-97 -j DROP +-A logdrop-98 -m limit --limit 1/second -j LOG +-A logdrop-98 -j DROP +-A logdrop-99 -m limit --limit 1/second -j LOG +-A logdrop-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG -A logreject-0 -m limit --limit 1/second -j LOG -A logreject-0 -j REJECT @@ -1768,6 +2455,24 @@ COMMIT -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack +-A OUTPUT -o eth0 -j CT --notrack -A OUTPUT -p tcp --dport 80 -j CT --notrack -A OUTPUT -p esp -j CT --notrack -A OUTPUT -p udp -m multiport --sports 500,4500 -j CT --notrack @@ -1849,6 +2554,42 @@ COMMIT -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack +-A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -p tcp --sport 80 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -p esp -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -p udp -m multiport --dports 500,4500 -j CT --notrack |